Function at 0x45c5a0
Capabilities:
Create process on windows
Self delete
Set current directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x492ba6
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x4b04dc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
xor ebx, ebx
mov dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x4c], ebx
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xbc], edi
cmp byte [eax + 0x84], bl
jne 0x45c5ff
mov byte [eax + 0x84], 1
mov eax, 0xf
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa8], ebx
mov byte [ebp - 0xb8], bl
mov dword [ebp - 4], ebx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
push ecx
mov eax, esp
mov byte [ebp - 4], 3
mov dword [eax], str.mini
mov eax, edi
mov dword [ebp - 0xc0], esp
call fcn.00470930
cmp al, bl
je 0x45ca39
mov ecx, dword [edi + 0x3c]
cmp ecx, ebx
je 0x45c688
cmp dword [edi + 0x4c], 1
jne 0x45c688
mov eax, dword [edi + 0x40]
mov dword [edi + 0x38], ecx
xor ecx, ecx
cmp eax, ebx
setne cl
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], ebx
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x4c], ecx
push ecx
mov eax, esp
mov dword [eax], str.enable
mov eax, edi
mov dword [ebp - 0xc0], esp
call fcn.00470930
cmp al, bl
je 0x45c7c5
lea esi, [ebp - 0x2c]
mov ecx, edi
call fcn.0045b310
mov edx, esi
push edx
lea ebx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.0040def0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 5
call fcn.00405790
mov esi, 0x10
mov byte [ebp - 4], 4
cmp dword [ebp - 0x34], esi
jb 0x45c6e7
mov eax, dword [ebp - 0x48]
push eax
call fcn.0047659a
add esp, 4
mov ecx, str.false
lea edi, [ebp - 0x2c]
call fcn.00406340
test al, al
jne 0x45c71e
mov ecx, 0x4a0bbc
call fcn.00406340
test al, al
jne 0x45c71e
mov ecx, edi
mov byte [ebp - 4], 3
call fcn.0046fe30
mov edi, dword [ebp - 0xbc]
xor ebx, ebx
jmp 0x45c7ca
mov eax, dword [ebp - 0xbc]
call fcn.004715f0
cmp dword [ebp - 0x18], esi
jb 0x45c73a
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0047659a
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
cmp dword [ebp - 0x88], esi
jb 0x45c761
mov edx, dword [ebp - 0x9c]
push edx
call fcn.0047659a
add esp, 4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], esi
jb 0x45c784
mov eax, dword [ebp - 0x64]
push eax
call fcn.0047659a
add esp, 4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x6c], esi
jb 0x45c79e
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.0047659a
add esp, 4
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
cmp dword [ebp - 0xa4], esi
jb 0x45c7be
mov edx, dword [ebp - 0xb8]
push edx
call fcn.0047659a
add esp, 4
xor al, al
jmp 0x45ccb3
mov esi, 0x10
xor ecx, ecx
cmp dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
setne cl
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
push ecx
mov eax, esp
mov dword [edi + 0x4c], ecx
mov dword [eax], 0x4a0bc0
mov eax, edi
mov dword [ebp - 0xc0], esp
call fcn.00470930
cmp al, bl
je 0x45c865
lea esi, [ebp - 0x48]
mov ecx, edi
call fcn.0045b310
push eax
lea ebx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.0040def0
add esp, 4
mov edi, eax
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 7
call fcn.00405790
mov esi, 0x10
cmp dword [ebp - 0x18], esi
jb 0x45c839
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0047659a
add esp, 4
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x2c], al
cmp dword [ebp - 0x34], esi
jb 0x45c85d
mov eax, dword [ebp - 0x48]
push eax
call fcn.0047659a
add esp, 4
mov edi, dword [ebp - 0xbc]
xor ebx, ebx
xor ecx, ecx
cmp dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
setne cl
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
push ecx
mov eax, esp
mov dword [edi + 0x4c], ecx
mov dword [eax], str.height
mov eax, edi
mov dword [ebp - 0xc0], esp
call fcn.00470930
cmp al, bl
je 0x45c8fd
lea esi, [ebp - 0x48]
mov ecx, edi
call fcn.0045b310
push eax
lea ebx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.0040def0
add esp, 4
mov edi, eax
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 9
call fcn.00405790
mov esi, 0x10
cmp dword [ebp - 0x18], esi
jb 0x45c8d1
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0047659a
add esp, 4
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x2c], al
cmp dword [ebp - 0x34], esi
jb 0x45c8f5
mov eax, dword [ebp - 0x48]
push eax
call fcn.0047659a
add esp, 4
mov edi, dword [ebp - 0xbc]
xor ebx, ebx
xor ecx, ecx
cmp dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
setne cl
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
push ecx
mov eax, esp
mov dword [edi + 0x4c], ecx
mov dword [eax], str.width
mov eax, edi
mov dword [ebp - 0xc0], esp
call fcn.00470930
cmp al, bl
je 0x45c995
lea esi, [ebp - 0x48]
mov ecx, edi
call fcn.0045b310
push eax
lea ebx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.0040def0
add esp, 4
mov edi, eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 0xb
call fcn.00405790
mov esi, 0x10
cmp dword [ebp - 0x18], esi
jb 0x45c969
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0047659a
add esp, 4
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x2c], al
cmp dword [ebp - 0x34], esi
jb 0x45c98d
mov eax, dword [ebp - 0x48]
push eax
call fcn.0047659a
add esp, 4
mov edi, dword [ebp - 0xbc]
xor ebx, ebx
xor ecx, ecx
cmp dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
setne cl
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
push ecx
mov eax, esp
mov dword [edi + 0x4c], ecx
mov dword [eax], str.delay
mov eax, edi
mov dword [ebp - 0xc0], esp
call fcn.00470930
cmp al, bl
je 0x45ca30
lea esi, [ebp - 0x48]
mov ecx, edi
call fcn.0045b310
push eax
lea ebx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
call fcn.0040def0
add esp, 4
mov edi, eax
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0xd
call fcn.00405790
mov esi, 0x10
cmp dword [ebp - 0x18], esi
jb 0x45ca04
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0047659a
add esp, 4
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x2c], al
cmp dword [ebp - 0x34], esi
jb 0x45ca28
mov eax, dword [ebp - 0x48]
push eax
call fcn.0047659a
add esp, 4
mov edi, dword [ebp - 0xbc]
xor ebx, ebx
mov eax, edi
call fcn.004715f0
jmp 0x45ca3e
mov esi, 0x10
cmp dword [ebp - 0xa8], ebx
je 0x45cc38
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0xe
call fcn.0041aef0
mov eax, dword [ebp - 0x48]
add esp, 4
cmp dword [ebp - 0x34], esi
jae 0x45ca72
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov edx, dword [ebp - 0xc4]
mov edi, dword [edx + 0x98]
cmp edi, ebx
jne 0x45cb2b
cmp dword [ebp - 0x34], esi
jb 0x45ca9e
mov eax, dword [ebp - 0x48]
push eax
call fcn.0047659a
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
cmp dword [ebp - 0x88], esi
jb 0x45cac3
mov ecx, dword [ebp - 0x9c]
push ecx
call fcn.0047659a
add esp, 4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], esi
jb 0x45cae6
mov edx, dword [ebp - 0x64]
push edx
call fcn.0047659a
add esp, 4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x6c], esi
jb 0x45cb00
mov eax, dword [ebp - 0x80]
push eax
call fcn.0047659a
add esp, 4
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
cmp dword [ebp - 0xa4], esi
jb 0x45c7be
mov ecx, dword [ebp - 0xb8]
push ecx
call fcn.0047659a
add esp, 4
xor al, al
jmp 0x45ccb3
mov byte [edi], 1
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x6c], esi
jae 0x45cb39
lea eax, [ebp - 0x80]
push 0xa
push ebx
push eax
call fcn.0047962e
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x64]
add esp, 0xc
cmp dword [ebp - 0x50], esi
jae 0x45cb53
lea eax, [ebp - 0x64]
push 0xa
push ebx
push eax
call fcn.0047962e
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x9c]
add esp, 0xc
cmp dword [ebp - 0x88], esi
jae 0x45cb76
lea eax, [ebp - 0x9c]
push 0xa
push ebx
push eax
call fcn.0047962e
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xa8]
add esp, 0xc
mov dword [ebp - 0xc4], 0x400
mov dword [ebp - 0xbc], eax
lea ecx, [ebp - 0xc4]
cmp eax, 0x400
ja 0x45cbae
lea ecx, [ebp - 0xbc]
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0xa4], esi
jae 0x45cbc2
lea eax, [ebp - 0xb8]
mov edx, dword [ecx]
push edx
push eax
add edi, 0x10
push edi
call fcn.0047a010
add esp, 0xc
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea edi, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.0041af60
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], esi
jae 0x45cbf5
mov eax, edi
push 1
push ebx
push 0x4a0bcc
push eax
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp dword [ebp - 0x18], esi
jb 0x45cc17
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0047659a
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
cmp dword [ebp - 0x34], esi
jb 0x45cc3d
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.0047659a
add esp, 4
jmp 0x45cc3d
mov edi, 0xf
cmp dword [ebp - 0x88], esi
jb 0x45cc54
mov edx, dword [ebp - 0x9c]
push edx
call fcn.0047659a
add esp, 4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], esi
jb 0x45cc77
mov eax, dword [ebp - 0x64]
push eax
call fcn.0047659a
add esp, 4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x6c], esi
jb 0x45cc91
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.0047659a
add esp, 4
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
cmp dword [ebp - 0xa4], esi
jb 0x45ccb1
mov edx, dword [ebp - 0xb8]
push edx
call fcn.0047659a
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00475dcc
mov esp, ebp
pop ebp
ret 4