Function at 0x4063ed
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x464235
mov eax, dword fs:[0]
push eax
mov eax, 0x106c
call fcn.0043e230
mov eax, dword [0x4ce174]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
xor ecx, ecx
mov dword [ebp - 0x1078], 0x469bd0
mov byte [ebp - 0x1071], cl
push 2
pop ebx
cmp edi, 0x32
jg 0x406720
je 0x406893
lea eax, [edi - 1]
cmp eax, 0x11
ja case.0x406459.9
movzx eax, byte [eax + 0x406ba1]
jmp dword [eax*4 + 0x406b85]
push 0xf
pop esi
push 0x469c78
mov byte [ebp - 0x106c], cl
push dword [ebp - 0x106c]
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x1028], ecx
mov byte [ebp - 0x1038], cl
lea ecx, [ebp - 0x1038]
push 0x4f
mov dword [ebp - 0x1024], esi
call fcn.00401f64
and dword [ebp - 4], 0
lea eax, [ebp - 0x1038]
push eax
lea eax, [ebp - 0x1050]
push eax
call fcn.00408445
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4064ba
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x1020]
push eax
call fcn.00442ff0
pop ecx
pop ecx
lea ecx, [ebp - 0x1050]
call fcn.004056fd
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1024]
cmp eax, 0x10
jb 0x406527
mov ecx, dword [ebp - 0x1038]
inc eax
mov dword [ebp - 0x1070], eax
mov dword [ebp - 0x106c], ecx
cmp eax, 0x1000
jb 0x40651e
lea eax, [ebp - 0x1070]
push eax
lea eax, [ebp - 0x106c]
push eax
call fcn.004051b1
mov eax, dword [ebp - 0x1070]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x106c]
push eax
push ecx
call fcn.0043e103
pop ecx
pop ecx
xor ebx, ebx
mov byte [ebp - 0x1071], 1
jmp 0x406960
push 0xf
pop esi
push 0x469cc8
mov byte [ebp - 0x106c], cl
push dword [ebp - 0x106c]
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x1028], ecx
mov byte [ebp - 0x1038], cl
lea ecx, [ebp - 0x1038]
push 0x83
mov dword [ebp - 0x1024], esi
call fcn.00401f64
mov dword [ebp - 4], 1
lea eax, [ebp - 0x1038]
push eax
lea eax, [ebp - 0x1050]
push eax
call fcn.00408445
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x406595
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x1020]
push eax
call fcn.00442ff0
pop ecx
pop ecx
lea ecx, [ebp - 0x1050]
call fcn.004056fd
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1024]
cmp eax, 0x10
jb 0x406602
mov ecx, dword [ebp - 0x1038]
inc eax
mov dword [ebp - 0x1070], ecx
mov dword [ebp - 0x106c], eax
cmp eax, 0x1000
jb 0x4065f9
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x1070]
push eax
call fcn.004051b1
mov eax, dword [ebp - 0x106c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1070]
push eax
push ecx
call fcn.0043e103
pop ecx
pop ecx
xor ebx, ebx
jmp 0x406960
push 0xf
pop esi
push 0x469d50
mov byte [ebp - 0x106c], cl
push dword [ebp - 0x106c]
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x1028], ecx
mov byte [ebp - 0x1038], cl
lea ecx, [ebp - 0x1038]
push 0x5d
mov dword [ebp - 0x1024], esi
call fcn.00401f64
mov dword [ebp - 4], 2
jmp 0x4068d6
push 0xf
pop esi
push 0x469db0
mov byte [ebp - 0x106c], cl
push dword [ebp - 0x106c]
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x1028], ecx
mov byte [ebp - 0x1038], cl
lea ecx, [ebp - 0x1038]
push 0x9c
mov dword [ebp - 0x1024], esi
call fcn.00401f64
mov dword [ebp - 4], 3
jmp 0x4068d6
push 0xf
pop esi
push 0x469e50
mov byte [ebp - 0x106c], cl
push dword [ebp - 0x106c]
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x1028], ecx
mov byte [ebp - 0x1038], cl
lea ecx, [ebp - 0x1038]
push 0x38
mov dword [ebp - 0x1024], esi
call fcn.00401f64
mov dword [ebp - 4], 4
jmp 0x4068d6
push 0xf
pop esi
push 0x469e8c
mov byte [ebp - 0x106c], cl
push dword [ebp - 0x106c]
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x1028], ecx
mov byte [ebp - 0x1038], cl
lea ecx, [ebp - 0x1038]
push 0x1d
mov dword [ebp - 0x1024], esi
call fcn.00401f64
mov dword [ebp - 4], 5
jmp 0x406578
mov eax, edi
sub eax, 0x33
je 0x406893
sub eax, 1
je 0x406893
dec eax
sub eax, 1
je 0x406893
sub eax, 3
je 0x406788
push 0xf
pop esi
push 0x469fb4
mov byte [ebp - 0x106c], cl
push dword [ebp - 0x106c]
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x1028], ecx
mov byte [ebp - 0x1038], cl
lea ecx, [ebp - 0x1038]
push 0x2b
mov dword [ebp - 0x1024], esi
call fcn.00401f64
mov dword [ebp - 4], 8
jmp 0x4068d6
push 0xf
pop esi
push 0x469f60
mov byte [ebp - 0x106c], cl
push dword [ebp - 0x106c]
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x1028], ecx
mov byte [ebp - 0x1038], cl
lea ecx, [ebp - 0x1038]
push 0x50
mov dword [ebp - 0x1024], esi
call fcn.00401f64
lea eax, [ebp - 0x1038]
mov dword [ebp - 4], 7
push eax
lea eax, [ebp - 0x1050]
push eax
call fcn.00408445
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4067e5
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x1020]
push eax
call fcn.00442ff0
pop ecx
pop ecx
lea ecx, [ebp - 0x1050]
call fcn.004056fd
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1024]
cmp eax, 0x10
jb 0x406852
mov ecx, dword [ebp - 0x1038]
inc eax
mov dword [ebp - 0x106c], eax
mov dword [ebp - 0x1070], ecx
cmp eax, 0x1000
jb 0x406849
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x1070]
push eax
call fcn.004051b1
mov eax, dword [ebp - 0x106c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1070]
push eax
push ecx
call fcn.0043e103
pop ecx
pop ecx
xor eax, eax
inc eax
cmp dword [0x4ce028], 0
mov ebx, eax
mov byte [ebp - 0x1071], al
je 0x406884
cmp dword [0x4ce02c], 8
mov eax, 0x4ce018
cmovae eax, dword [0x4ce018]
mov dword [ebp - 0x1078], eax
jmp 0x406960
mov dword [ebp - 0x1078], str.https:__download.scdn.co_SpotifyFullSetup.exe
jmp 0x406960
push 0xf
pop esi
push 0x469eb0
mov byte [ebp - 0x106c], cl
push dword [ebp - 0x106c]
mov dword [ebp - 0x1038], ecx
mov dword [ebp - 0x1028], ecx
mov byte [ebp - 0x1038], cl
lea ecx, [ebp - 0x1038]
push 0xae
mov dword [ebp - 0x1024], esi
call fcn.00401f64
mov dword [ebp - 4], 6
lea eax, [ebp - 0x1038]
push eax
lea eax, [ebp - 0x1050]
push eax
call fcn.00408445
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4068f3
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x1020]
push eax
call fcn.00442ff0
pop ecx
pop ecx
lea ecx, [ebp - 0x1050]
call fcn.004056fd
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1024]
cmp eax, 0x10
jb 0x406960
mov ecx, dword [ebp - 0x1038]
inc eax
mov dword [ebp - 0x106c], eax
mov dword [ebp - 0x1070], ecx
cmp eax, 0x1000
jb 0x406957
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x1070]
push eax
call fcn.004051b1
mov eax, dword [ebp - 0x106c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1070]
push eax
push ecx
call fcn.0043e103
pop ecx
pop ecx
push edi
lea eax, [ebp - 0x20]
push 0x469fe0
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x1020]
push 0x469fe4
push eax
call fcn.00443000
add esp, 0x14
mov dword [ebp - 0x1024], esi
xor eax, eax
lea ecx, [ebp - 0x1038]
mov dword [ebp - 0x1038], eax
mov dword [ebp - 0x1028], eax
push 0xc
push 0x469fe8
mov byte [ebp - 0x1038], al
call fcn.004058cd
lea eax, [ebp - 0x1038]
mov dword [ebp - 4], 9
push eax
lea eax, [ebp - 0x1050]
push eax
call fcn.00408445
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4069d4
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x1020]
push eax
call fcn.00443000
pop ecx
pop ecx
lea ecx, [ebp - 0x1050]
call fcn.004056fd
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1024]
cmp eax, 0x10
jb 0x406a41
mov ecx, dword [ebp - 0x1038]
inc eax
mov dword [ebp - 0x106c], eax
mov dword [ebp - 0x1070], ecx
cmp eax, 0x1000
jb 0x406a38
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x1070]
push eax
call fcn.004051b1
mov eax, dword [ebp - 0x106c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1070]
push eax
push ecx
call fcn.0043e103
pop ecx
pop ecx
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1020]
push eax
call fcn.00443000
lea eax, [ebp - 0x1020]
push 0x469ff8
push eax
call fcn.00443000
add esp, 0x10
mov dword [ebp - 0x1054], esi
xor edi, edi
lea ecx, [ebp - 0x1020]
cmp ebx, 2
lea edx, [ecx + 1]
push 5
pop eax
cmove edi, eax
xor eax, eax
inc eax
cmp ebx, eax
cmove edi, eax
or edi, 0x30
xor eax, eax
mov dword [ebp - 0x1068], eax
mov dword [ebp - 0x1058], eax
mov byte [ebp - 0x1068], al
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406a9e
sub ecx, edx
lea eax, [ebp - 0x1020]
push ecx
push eax
lea ecx, [ebp - 0x1068]
call fcn.004058cd
lea eax, [ebp - 0x1068]
mov dword [ebp - 4], 0xa
push edi
push eax
call fcn.00406bc9
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1054]
mov esi, eax
cmp ecx, 0x10
jb 0x406b22
mov edx, dword [ebp - 0x1068]
inc ecx
mov dword [ebp - 0x106c], ecx
mov dword [ebp - 0x1070], edx
cmp ecx, 0x1000
jb 0x406b19
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x1070]
push eax
call fcn.004051b1
mov edx, dword [ebp - 0x1070]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x106c]
push ecx
push edx
call fcn.0043e103
pop ecx
pop ecx
cmp esi, 4
sete bh
cmp esi, 2
sete bl
cmp esi, 4
je 0x406b59
test bl, bl
jne 0x406b59
cmp byte [ebp - 0x1071], bl
je 0x406b59
push 5
pop eax
push eax
xor eax, eax
push eax
push eax
push dword [ebp - 0x1078]
push 0x469ffc
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
test bh, bh
je 0x406b66
test bl, bl
jne 0x406b66
xor eax, eax
inc eax
jmp 0x406b68
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043e116
leave
ret