Function at 0x482d40
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x482d48
push ebx
push esi
push edi
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x482fb6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, esi
call fcn.00404be8
mov byte [ebp - 0x1d], 0
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004824d4
push dword [ebp - 0x24]
push 0x482fcc
push 0x482ff8
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404f68
mov eax, dword [ebp - 0xc]
call fcn.00409c5c
test al, al
je 0x482dcc
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00484410
mov eax, dword [ebp - 0x28]
mov edx, 0x483010
call fcn.00482cc0
test eax, eax
jl 0x482dcc
mov eax, esi
mov edx, dword [ebp - 0xc]
call fcn.00404c3c
jmp 0x482f8e
lea ecx, [ebp - 0xc]
lea edx, [ebp - 0x1d]
mov eax, ebx
call fcn.00482768
cmp byte [ebp - 0x1d], 0
je 0x482dee
mov eax, esi
mov ecx, 0x483020
mov edx, dword [ebp - 0xc]
call fcn.00404ef4
mov eax, dword [esi]
call fcn.00409c5c
test al, al
jne 0x482eb9
lea edx, [ebp - 8]
mov eax, ebx
call fcn.004815e8
mov ecx, 0x483020
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404ef4
mov eax, dword [ebp - 0xc]
call fcn.00409c5c
test al, al
je 0x482e32
mov eax, esi
mov edx, dword [ebp - 0xc]
call fcn.00404c3c
jmp 0x482f8e
xor edi, edi
lea eax, [ebp - 4]
push eax
mov ecx, edi
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004816cc
mov ecx, 0x483020
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 4]
call fcn.00404ef4
mov eax, dword [ebp - 0xc]
call fcn.00409c5c
test al, al
jne 0x482e90
lea eax, [ebp - 0x2c]
mov ecx, 0x483048
mov edx, dword [ebp - 4]
call fcn.00404ef4
mov eax, dword [ebp - 0x2c]
call fcn.00409c5c
test al, al
je 0x482e9f
mov ecx, 0x483048
mov eax, esi
mov edx, dword [ebp - 4]
call fcn.00404ef4
jmp 0x482f8e
mov eax, esi
mov edx, dword [ebp - 0xc]
call fcn.00404c3c
jmp 0x482f8e
inc edi
cmp edi, 0xb
jne 0x482e34
mov eax, dword [esi]
call fcn.00409c5c
test al, al
jne 0x482eb9
mov edx, esi
mov eax, ebx
call fcn.00484c28
mov eax, dword [esi]
call fcn.00409c5c
test al, al
jne 0x482f8e
lea eax, [ebp - 0x30]
call fcn.004812a0
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0x10]
mov ecx, 0x483064
call fcn.00404ef4
mov eax, dword [ebp - 0x10]
call fcn.00409c5c
test al, al
jne 0x482f55
lea eax, [ebp - 0x34]
call fcn.0048142c
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x14]
call fcn.0040e190
lea eax, [ebp - 0x38]
mov ecx, 0x48308c
mov edx, dword [ebp - 0x14]
call fcn.00404ef4
mov eax, dword [ebp - 0x38]
call fcn.00409c5c
test al, al
jne 0x482f55
push 0x4830a8
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x3c]
mov ecx, 0x4830b8
mov edx, dword [ebp - 0x14]
call fcn.00404ef4
mov edx, dword [ebp - 0x3c]
mov ecx, 0x4830cc
mov eax, ebx
call fcn.00483920
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00404ef4
mov eax, dword [ebp - 0x10]
call fcn.00409c5c
test al, al
je 0x482f8e
push 0
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x10]
call fcn.00409f90
mov eax, dword [ebp - 0x40]
call fcn.004050a8
push eax
push 0
mov eax, dword [ebp - 0x10]
call fcn.004050a8
push eax
push 0x4830d4
push 0
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x482fbd
lea eax, [ebp - 0x40]
mov edx, 8
call fcn.00404c0c
lea eax, [ebp - 0x1c]
mov edx, 7
call fcn.00404c0c
ret