Function at 0x464448
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.00464448
xor esi, esi
push esi
push esi
push esi
push esi
mov edx, 0x485fb0
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.004041fc
call fcn.00478833
mov ebx, 0x47c7f4
call fcn.004779f9
xor eax, eax
mov edx, dword [0x47c7f4]
call fcn.00478805
push 1
push eax
call fcn.00404070
pop dword [ebp - 0x30]
pop ecx
call fcn.00478833
mov eax, ecx
call fcn.0046ea92
cmp eax, dword [ebp - 0x30]
jne 0x464558
mov edx, 0x485fe8
call fcn.0047881c
mov eax, 0x12000
mov edx, 0x47f2c4
call fcn.0047881c
call fcn.0046e9da
mov edx, 0x485fe8
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.0046d783
push 0
push 1
mov edx, 0x485f40
call fcn.0047881c
mov eax, 1
call fcn.004763d4
call fcn.00477cbd
mov edx, 0x47f204
call fcn.0047881c
call fcn.00477cbd
lea ebx, [esp + 4]
call fcn.00477abb
call dword [sym.imp.KERNEL32.DLL_WinExec]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
fldcw word [ebp - 0x10]
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, 0x47c744
push ebx
push 0xd9f0a0
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, 0x47c748
push ebx
mov eax, 8
mov ecx, dword [0x47c744]
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, 0x47c74c
push ebx
mov eax, 0x2c
mov ecx, dword [0x47c744]
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, 0x47c7a0
push ebx
mov eax, 0x1a90
mov ecx, dword [0x47c74c]
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, 0x47c7a4
push ebx
mov eax, 0x1a8c
mov ecx, dword [0x47c74c]
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, 0x47c754
push ebx
mov eax, 0x1a60
mov ecx, dword [0x47c74c]
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, 0x47c758
push ebx
mov eax, 8
mov ecx, dword [0x47c754]
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, 0x47c750
push ebx
mov eax, 0x27c
mov ecx, dword [0x47c74c]
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, str..ini
push ebx
mov eax, 0x3c
mov ecx, dword [0x47c74c]
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
mov ebx, 0x47c80c
push ebx
mov eax, 0x44
mov ecx, dword [0x47c74c]
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
cmp dword [0x47c798], 1
jne 0x46477d
mov dword [0x47c798], 0
mov ecx, 0x40738b
push ecx
push 0
push 0x100000
push 0
mov ebx, 0x47c79c
call fcn.0046eee2
mov eax, dword [0x47c738]
mov ecx, eax
mov eax, 0x321
call fcn.00471dac
push eax
call fcn.00463ba0
pop dword [ebp - 0x30]
call fcn.00478833
mov edx, 0x47f1fc
call fcn.0047881c
call fcn.00477cbd
mov edx, 0x481f68
call fcn.0047881c
call fcn.00477cbd
push dword [ebp - 0x30]
call fcn.00463b00
pop dword [ebp - 0x30]
call fcn.004779c4
call fcn.004767fd
call fcn.00477cbd
mov edx, 0x486004
call fcn.0047881c
call fcn.00477cbd
mov eax, dword [0x47c750]
call fcn.004779cb
call fcn.004767fd
call fcn.00477cbd
mov eax, dword [ebp - 0x30]
call fcn.00471e1d
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret