Function at 0x460ad0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5acd7c
mov eax, dword fs:[0]
push eax
sub esp, 0x190
mov eax, dword [0x5bd344]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [ebp + 0xc]
mov dword [esi + 0x970], 0
test edi, edi
je 0x460ef8
lea ecx, [ebp - 0x94]
call fcn.00548cab
push edi
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0
call fcn.00548ec7
push 0x41d768
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460b52
push 0
push 0x9c409c40
jmp 0x460c55
push 0x41d784
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460b72
push 0
push 0x9c419c41
jmp 0x460c55
push 0x41d7a0
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460b92
push 0
push 0x9c449c44
jmp 0x460c55
push 0x41d7bc
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460bb2
push 0
push 0x9c459c45
jmp 0x460c55
push 0x41d7dc
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460bd2
push 0
push 0x9c4d9c4d
jmp 0x460c55
push 0x41d800
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460bef
push 0
push 0x9c4e9c4e
jmp 0x460c55
push 0x41d820
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460c1d
push 0
push 0xf060
push 0x112
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x460daf
push 0x41d83c
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460c3a
push 0
push 0x9dd49dd4
jmp 0x460c55
push 0x41d86c
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460c6a
push 0
push 0x9dd39dd3
mov ecx, dword [esi + 4]
mov edx, 0x111
call fcn.00475c70
add esp, 8
jmp 0x460daf
push 0x41d888
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460d07
mov eax, dword [esi + 0x6c0]
mov edi, dword [0x5f0848]
mov ecx, dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x460ccb
push dword [eax + 4]
call ecx
test eax, eax
je 0x460cc5
mov eax, dword [esi + 0x6c0]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov ecx, dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x460ccb
mov eax, dword [esi + 0x6c0]
mov edi, dword [eax + 4]
jmp 0x460ccb
mov ecx, dword [sym.imp.USER32.dll_IsWindow]
mov eax, dword [esi + 0x6bc]
test eax, eax
je 0x460cfa
push dword [eax + 4]
call ecx
test eax, eax
je 0x460cfa
mov eax, dword [esi + 0x6bc]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x460cfa
mov eax, dword [esi + 0x6bc]
mov edi, dword [eax + 4]
push edi
mov ecx, esi
call fcn.00461910
jmp 0x460daf
push 0x41d8a8
lea ecx, [ebp - 0x94]
call fcn.00548de4
test al, al
je 0x460daf
lea ecx, [ebp - 0x19c]
call fcn.00548cab
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 1
push eax
call fcn.005434c4
add esp, 4
push 0x41d8c8
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 2
call fcn.00548e35
push 1
push 0x41d8e8
lea eax, [ebp - 0x19c]
push 0x41d8f8
push eax
call fcn.0054916b
add esp, 0x10
lea ecx, [ebp - 0x19c]
push 0
push 0
call fcn.0048f4c0
push eax
lea ecx, [ebp - 0x118]
call fcn.0048f4c0
push eax
push 0x41bde4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x118]
call fcn.00537eb5
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], 0
call fcn.00537eb5
lea ecx, [ebp - 0x94]
call fcn.0048f4c0
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x118]
call fcn.00548c87
push 0x41d918
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 3
call fcn.00548de4
test al, al
je 0x460dec
push 0
push 0x9d6c9d6c
jmp 0x460e7b
push 0x41d934
lea ecx, [ebp - 0x118]
call fcn.00548de4
test al, al
je 0x460e09
push 0
push 0x9d6e9d6e
jmp 0x460e7b
push 0x41d950
lea ecx, [ebp - 0x118]
call fcn.00548de4
test al, al
je 0x460e26
push 0
push 0x9d6f9d6f
jmp 0x460e7b
push 0x41d96c
lea ecx, [ebp - 0x118]
call fcn.00548de4
test al, al
je 0x460e43
push 0
push 0x9d729d72
jmp 0x460e7b
push 0x41d9f4
lea ecx, [ebp - 0x118]
call fcn.00548de4
test al, al
je 0x460e60
push 0
push 0x9d749d74
jmp 0x460e7b
push 0x41d98c
lea ecx, [ebp - 0x118]
call fcn.00548de4
test al, al
je 0x460e8d
push 0
push 0x9d769d76
mov ecx, dword [esi + 4]
mov edx, 0x111
call fcn.00475c70
add esp, 8
jmp 0x460ee2
push 0x41d9b4
lea ecx, [ebp - 0x118]
call fcn.00548de4
test al, al
je 0x460eaa
mov ecx, esi
call fcn.00461b10
jmp 0x460ee2
push 0x41d9d0
lea ecx, [ebp - 0x118]
call fcn.00548de4
test al, al
je 0x460ec7
mov ecx, esi
call fcn.00461d90
jmp 0x460ee2
push 0x41dae8
lea ecx, [ebp - 0x118]
call fcn.00548de4
test al, al
je 0x460ee2
mov ecx, esi
call fcn.00461460
lea ecx, [ebp - 0x118]
call fcn.00537eb5
lea ecx, [ebp - 0x94]
call fcn.00537eb5
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret 0x10