Function at 0x662c50
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 6
push 0
push 0
dec ecx
jne 0x662c58
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x662ffd
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov ecx, 0x663018
mov edx, 0x663034
mov eax, dword [0x67c8d4]
mov esi, dword [eax]
call dword [esi + 0x14]
test al, al
je 0x662d62
push 0
mov ecx, 0x66304c
mov edx, 0x663064
mov eax, dword [0x67c8d4]
mov esi, dword [eax]
call dword [esi + 0x14]
test al, al
je 0x662d62
push 0x124
push 0x663070
push 0x6630a8
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x6630dc
mov edx, 0x6630fc
mov eax, dword [0x67c8d4]
mov esi, dword [eax]
call dword [esi + 4]
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0xc]
call fcn.006428d8
mov eax, dword [ebp - 0xc]
call fcn.0040a13c
push eax
mov eax, ebx
call fcn.0054ab1c
push eax
call sub.user32.dll_MessageBoxW
cmp eax, 6
jne 0x662d62
push 1
push 0
push 0
push 0x663114
lea eax, [ebp - 0x18]
call fcn.00662bb0
push dword [ebp - 0x18]
push 0x663158
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x66318c
mov edx, 0x6631a4
mov eax, dword [0x67c8d4]
mov esi, dword [eax]
call dword [esi + 4]
push dword [ebp - 0x1c]
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.0040a418
mov eax, dword [ebp - 0x14]
call fcn.0040a13c
push eax
push 0x6631b0
mov eax, dword [0x67644c]
mov eax, dword [eax]
mov eax, dword [eax + 0x188]
push eax
call sub.shell32.dll_ShellExecuteW
cmp dword [0x67c8d0], 0xa
jne 0x662f2c
mov esi, dword [ebx + 0x3ec]
cmp byte [esi + 0x69], 0
je 0x662dba
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x104]
test al, al
je 0x662dba
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x6631c8
mov edx, 0x6631f4
mov eax, dword [0x67c8d4]
mov esi, dword [eax]
call dword [esi + 4]
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.006428d8
mov eax, dword [ebp - 0x20]
xor ecx, ecx
xor edx, edx
call fcn.00658d90
mov esi, dword [ebx + 0x454]
cmp byte [esi + 0x69], 0
je 0x662f12
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x104]
test al, al
je 0x662f12
push 0
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x66320c
mov edx, 0x663240
mov eax, dword [0x67c8d4]
mov esi, dword [eax]
call dword [esi + 4]
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 4]
call fcn.006428d8
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x663258
call fcn.0040a710
test eax, eax
jle 0x662f06
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x663268
call fcn.0040a710
test eax, eax
jle 0x662f06
lea edx, [ebp - 0x2c]
mov eax, dword [ebx + 0x44c]
call fcn.005418f8
mov eax, dword [ebp - 0x2c]
mov ecx, 1
mov edx, dword [ebp - 4]
call fcn.0040a710
test eax, eax
jle 0x662ee0
lea edx, [ebp - 0x30]
mov eax, dword [ebx + 0x44c]
call fcn.005418f8
mov eax, dword [ebp - 0x30]
mov ecx, 1
mov edx, dword [ebp - 4]
call fcn.0040a710
mov dword [ebp - 8], eax
lea edx, [ebp - 0x34]
mov eax, dword [ebx + 0x44c]
call fcn.005418f8
mov eax, dword [ebp - 0x34]
mov esi, eax
test esi, esi
je 0x662e98
sub esi, 4
mov esi, dword [esi]
mov edi, dword [ebp - 4]
test edi, edi
je 0x662ea4
sub edi, 4
mov edi, dword [edi]
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 8]
add edx, esi
inc edx
mov ecx, edi
mov eax, dword [ebp - 4]
call fcn.0040a500
lea eax, [ebp - 4]
push eax
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x663278
call fcn.0040a710
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040a500
jmp 0x662f06
lea eax, [ebp - 4]
push eax
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x663288
call fcn.0040a710
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040a500
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00658d90
mov eax, dword [ebx + 0x3f0]
cmp byte [eax + 0x69], 0
je 0x662f2c
cmp dword [eax + 0x2a0], 0
jne 0x662f2c
call fcn.00643e9c
xor eax, eax
push ebp
push 0x662f6c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x67c8d8]
call fcn.004078f0
mov eax, dword [0x67c8d4]
call fcn.004078f0
mov eax, dword [0x67c928]
call fcn.004078f0
mov eax, dword [0x67c930]
call fcn.004078f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x662f76
mov dl, 1
mov eax, dword [0x67c8f8]
call fcn.004241d0
test al, al
je 0x662fc8
xor eax, eax
push ebp
push 0x662fbe
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x67c8f8]
call fcn.0040a13c
push eax
call sub.gdi32.dll_RemoveFontResourceW
push 0
push 0
push 0x1d
push 0xffff
call sub.user32.dll_SendMessageW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x662fc8
call fcn.0064330c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x663004
lea eax, [ebp - 0x34]
mov edx, 3
call fcn.004095cc
lea eax, [ebp - 0x28]
mov edx, 8
call fcn.004095cc
lea eax, [ebp - 4]
call fcn.0040956c
ret