Function at 0x46218c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov edx, dword fs:[0]
push 0xffffffffffffffff
push 0x4625dd
push edx
mov dword fs:[0], esp
sub esp, 8
sub esp, 0x298
mov dword [ebp - 0x2ac], ebx
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x2a8], esi
mov dword [ebp - 0x2a4], edi
mov dword [ebp - 4], 0
mov eax, 1
mov dword [ebp - 4], eax
mov dword [ebp - 4], 2
lea eax, [ebp + 0x3c]
call fcn.004083d4
test al, al
je 0x462211
mov esi, 0x4e3690
push esi
call fcn.0044a170
add esp, 4
mov edi, 0x4dab80
push edi
mov ebx, eax
mov eax, ebx
push 0x15
push 0x2b6
push 0
call fcn.00467518
push eax
call fcn.0044a110
push dword [ebp + 0x14]
test ebx, 1
sete al
call fcn.0046c2f4
mov esi, 0x50cd60
lea edi, [ebp - 0x290]
mov dword [ebp - 0x1c], eax
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
dec ecx
lea edx, [ebp + 0x30]
push edx
mov eax, 0x4daba0
lea esi, [ebp - 0x20]
push 0xfffffffffffffff6
push eax
lea eax, [ebp - 0x258]
push 5
mov dword [ebp - 0x290], 0x44
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], ecx
push esi
call fcn.00462604
lea ecx, [ebp + 0x24]
mov edx, 0x4dabb0
push ecx
lea edi, [ebp - 0x24]
lea eax, [ebp - 0x254]
push 0xfffffffffffffff5
push edx
push 6
push edi
call fcn.00462604
lea esi, [ebp + 0x18]
mov ecx, 0x4dabc0
push esi
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x250]
push 0xfffffffffffffff4
push ecx
push 6
push edx
call fcn.00462604
cmp dword [ebp - 0x258], 0
je 0x4622b4
cmp dword [ebp - 0x258], 0xffffffff
jne 0x4622d8
cmp dword [ebp - 0x254], 0
je 0x4622c6
cmp dword [ebp - 0x254], 0xffffffff
jne 0x4622d8
cmp dword [ebp - 0x250], 0
je 0x4622e2
cmp dword [ebp - 0x250], 0xffffffff
je 0x4622e2
mov dword [ebp - 0x264], 0x100
lea ecx, [ebp - 0x2a0]
xor edx, edx
mov esi, 0x8000000
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], edx
test ebx, 0x10
jne 0x462304
xor esi, esi
or esi, 0x400
lea eax, [ebp - 0x130]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0045e5dc
mov dword [ebp - 4], 3
push dword [ebp + 0x40]
lea eax, [ebp - 0x240]
push dword [ebp + 0x3c]
call fcn.0045e5dc
lea ecx, [ebp - 0x240]
mov eax, ecx
call fcn.00420300
mov edi, eax
mov edx, dword [ebp - 0x1c]
cmp dword [ebp + 8], 0
je 0x462358
lea eax, [ebp - 0x130]
call fcn.00420314
jmp 0x46235a
xor eax, eax
lea edx, [ebp - 0x2a0]
lea ecx, [ebp - 0x290]
push edx
push ecx
push eax
push dword [ebp - 0x1c]
push esi
push 1
push 0
push 0
push edi
push 0
call sub.KERNEL32.DLL_CreateProcessW
test eax, eax
sete cl
mov byte [ebp - 0x18], cl
lea eax, [ebp - 0x240]
call fcn.0042031c
cmp byte [ebp - 0x18], 0
je 0x4623b4
mov ecx, 0x4dabd0
mov edx, 0x4dabf0
mov eax, 0x2f2
push ecx
push 0x1b
push edx
push 0xd
call fcn.00466568
push eax
call fcn.0044a110
test ebx, 2
jne 0x4623da
mov esi, dword [ebp - 0x20]
cmp esi, 2
jle 0x4623da
call fcn.00462898
call fcn.004625e8
cmp esi, eax
je 0x4623da
lea eax, [ebp + 0x30]
call fcn.00451184
test ebx, 4
jne 0x462402
mov edx, dword [ebp - 0x24]
cmp edx, 2
jle 0x462402
push edx
call fcn.00451aac
call fcn.004625e8
pop edx
cmp edx, eax
je 0x462402
lea eax, [ebp + 0x24]
call fcn.00451184
test ebx, 8
jne 0x46242a
mov ecx, dword [ebp - 0x28]
cmp ecx, 2
jle 0x46242a
push ecx
call fcn.00454cec
call fcn.004625e8
pop ecx
cmp ecx, eax
je 0x46242a
lea eax, [ebp + 0x18]
call fcn.00451184
push dword [ebp - 0x29c]
call sub.KERNEL32.DLL_CloseHandle
test ebx, 0x40
je 0x4624a2
push dword [ebp - 0x2a0]
call sub.KERNEL32.DLL_CloseHandle
mov edx, 0x4daca0
push edx
call fcn.0044a170
add esp, 4
mov ebx, eax
push dword [ebp - 0x298]
mov eax, ebx
call fcn.00462878
lea ecx, [ebp - 0xc]
push eax
push 0xffffffffffffffff
push ecx
push 0x4dab40
call fcn.004540c0
add esp, 0xc
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ebx, dword [ebp - 0x2ac]
mov esi, dword [ebp - 0x2a8]
mov edi, dword [ebp - 0x2a4]
mov esp, ebp
pop ebp
ret 0x3c
mov esi, 0x4daca0
push esi
call fcn.0044a170
add esp, 4
mov ebx, eax
push dword [ebp - 0x298]
mov eax, ebx
push dword [ebp - 0x2a0]
call fcn.00462860
lea ecx, [ebp - 0xc]
push eax
push 0xffffffffffffffff
push ecx
push 0x4dab40
call fcn.004540c0
add esp, 0xc
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ebx, dword [ebp - 0x2ac]
mov esi, dword [ebp - 0x2a8]
mov edi, dword [ebp - 0x2a4]
mov esp, ebp
pop ebp
ret 0x3c