Function at 0x408450
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
push edi
mov eax, dword [0x4093b0]
mov byte [eax], 1
mov eax, 0x408410
call fcn.00404b58
mov ebx, 0x40a964
mov edi, 0x40a798
xor eax, eax
push ebp
push 0x408859
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x408870
mov eax, ebx
call fcn.00402984
mov eax, ebx
call fcn.00402714
call fcn.0040262c
mov esi, 1
jmp 0x4084bb
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
inc esi
mov eax, ebx
call fcn.00402aa4
call fcn.0040262c
test al, al
je 0x4084a2
mov eax, ebx
call fcn.00402a4c
call fcn.0040262c
mov edx, 0x408870
mov eax, ebx
call fcn.00402984
mov eax, ebx
call fcn.00402714
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
push 0x40ab34
mov ecx, 2
mov edx, 0x29
mov eax, dword [0x40ab38]
call fcn.00404058
mov eax, dword [0x40ab34]
call fcn.00405adc
mov dword [0x40ab4c], eax
push 0x40ab3c
mov ecx, 0xc
mov edx, 0x25
mov eax, dword [0x40ab38]
call fcn.00404058
mov eax, ebx
call fcn.00402a4c
call fcn.0040262c
mov eax, dword [0x40ab4c]
cmp eax, 0xc
ja case.0x4085da.0
jmp dword [eax*4 + 0x4085e1]
mov eax, 0x40ab44
mov edx, 0x408884
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x408890
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x40889c
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x4088a8
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x4088b4
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x4088c0
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x4088cc
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x4088d8
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x4088e4
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x4088f0
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x4088fc
call fcn.00403d48
jmp case.0x4085da.0
mov eax, 0x40ab44
mov edx, 0x408908
call fcn.00403d48
push 0x408914
push dword [0x40ab48]
push dword [0x40ab44]
push dword [0x40ab40]
mov eax, 0x40ab30
mov edx, 4
call fcn.00403fc0
mov edx, 0x408870
mov eax, ebx
call fcn.00402984
mov eax, ebx
call fcn.00402714
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
sub esi, 8
test esi, esi
jle 0x40883f
mov edx, 0x40ab38
mov eax, ebx
call fcn.00402c30
mov eax, ebx
call fcn.00402c9c
call fcn.0040262c
push 0x40ab3c
mov ecx, 0xc
mov edx, 0x25
mov eax, dword [0x40ab38]
call fcn.00404058
mov edx, 0x408920
mov eax, edi
call fcn.00402984
mov eax, edi
call fcn.00402720
call fcn.0040262c
mov edx, dword [0x40ab3c]
mov eax, edi
call fcn.004040fc
call fcn.00402eb4
call fcn.0040262c
mov eax, edi
call fcn.00402a4c
call fcn.0040262c
push 0x1f4
call sub.kernel32.dll_Sleep
push 0
push 0x40892c
call sub.kernel32.dll_WinExec
push 0x7d0
call sub.kernel32.dll_Sleep
dec esi
jne 0x4087ac
mov eax, ebx
call fcn.00402a4c
call fcn.0040262c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x408860
ret