Function at 0x4650e0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fa008
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push esi
push edi
mov eax, dword [0x6b7e40]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x38], esi
lea eax, [ebp - 0x10]
push eax
call fcn.00473e30
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x10]
or ebx, 0xffffffff
cmp dword [eax - 0xc], 0
je 0x4655b7
call fcn.004a4516
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x465149
push 0x80004005
call fcn.00402040
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0
lea eax, [ebp - 0x20]
push str._check__d
push eax
mov byte [ebp - 4], 1
call fcn.00404520
add esp, 0xc
call fcn.004a4516
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x465189
push 0x80004005
call fcn.00402040
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 2
mov edi, dword [ebp - 0x20]
push edi
push dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push str.__s___s
push eax
call fcn.00404520
add esp, 0x10
mov ecx, esi
call fcn.00475000
test al, al
je 0x4651ce
lea eax, [ebp - 0x14]
push str.__cfuincludenextmajor
push eax
call fcn.00422640
add esp, 8
call fcn.004a4516
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4651ea
push 0x80004005
call fcn.00402040
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 3
call fcn.004a4516
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x465217
push 0x80004005
call fcn.00402040
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 4
call fcn.0041aa70
mov ebx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x14]
add esp, 4
xor dl, dl
push 0
push 0
push 0
push ebx
mov ecx, esi
call fcn.0041ca60
add esp, 0x10
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x465406
cmp eax, 0x2e4
jne 0x465422
call fcn.004a4516
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x465285
push 0x80004005
call fcn.00402040
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 5
call fcn.004a4516
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4652b2
push 0x80004005
call fcn.00402040
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call fcn.0041aa70
mov esi, dword [ebp - 0x28]
add esp, 4
push 1
push esi
push edi
push dword [ebp - 0x10]
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x18]
cmp eax, 0x20
jg 0x465347
call fcn.00404540
push dword [ebp - 0x34]
mov byte [ebp - 4], 7
push dword [ebp - 0x10]
lea eax, [ebp - 0x18]
push str.Could_not_run_CFU_using_ShellExecute:__s__code__d_
push eax
call fcn.00404520
add esp, 0xc
mov ecx, esp
push 0x63bfdc
call fcn.004021e0
push 0
lea eax, [ebp - 0x18]
push eax
push 0x9cc
push str.C:_amintegration_tools_setupishield_sldim_sldbgdwldBgDwldManager.cpp
push 1
push 1
xor ecx, ecx
call fcn.004051a0
mov ecx, eax
call fcn.004022e0
jmp 0x465399
call fcn.00404540
mov byte [ebp - 4], 8
push dword [ebp - 0x10]
lea eax, [ebp - 0x18]
push str.CFU_failed_using_RunCmd__but_succeeded_using_ShellExecute:__s
push eax
call fcn.00404520
add esp, 8
mov ecx, esp
push 0x63bfdc
call fcn.004021e0
push 0
lea eax, [ebp - 0x18]
push eax
push 0x9d2
push str.C:_amintegration_tools_setupishield_sldim_sldbgdwldBgDwldManager.cpp
push 1
push 1
xor ecx, ecx
call fcn.004051a0
mov ecx, eax
call fcn.004022e0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4653ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4653db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 4
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4653f9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x14]
cmp dword [ebp - 0x1c], 0
jne 0x465506
call fcn.004a4516
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x465490
push 0x80004005
call fcn.00402040
cmp eax, 2
je 0x465406
cmp eax, 0x103
je 0x465406
lea ecx, [ebp - 0x18]
call fcn.00404540
mov byte [ebp - 4], 9
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push dword [ebp - 0x10]
push str.Could_not_run_CFU:__s__code__d_
push eax
call fcn.00404520
add esp, 0xc
mov ecx, esp
push 0x63bfdc
call fcn.004021e0
push 0
lea eax, [ebp - 0x18]
push eax
push 0x9df
push str.C:_amintegration_tools_setupishield_sldim_sldbgdwldBgDwldManager.cpp
push 1
push 1
xor ecx, ecx
call fcn.004051a0
mov ecx, eax
call fcn.004022e0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.00401020
jmp 0x4653fc
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1c], eax
push 0
mov byte [ebp - 4], 0xa
push dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
push str.RAN_CFU:__s__sync:__d_
push eax
call fcn.00404520
add esp, 0xc
mov ecx, esp
push 0x63bfdc
call fcn.004021e0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x9e7
push str.C:_amintegration_tools_setupishield_sldim_sldbgdwldBgDwldManager.cpp
push 1
push 1
xor ecx, ecx
call fcn.004051a0
mov ecx, eax
call fcn.004022e0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x465506
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x38]
cmp byte [eax + 0x30], 0
je 0x46553c
cmp dword [0x6c2288], 0
je 0x46553c
cmp dword [0x6c22ac], 0xffffffff
je 0x46553c
sub esp, 0x28
mov ecx, esp
push 0x6c2288
call fcn.00453130
xor dl, dl
xor cl, cl
call fcn.00426de0
add esp, 0x28
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46555d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [ebx - 0x10]
or ebx, 0xffffffff
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46557d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 1
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46559a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4655b7
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x4655d8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8