Function at 0x463280
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x535100]
xor eax, ebp
mov dword [ebp - 8], eax
movss xmm2, dword [0x540c3c]
movd xmm1, edx
cvtdq2ps xmm1, xmm1
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
comiss xmm1, xmm2
movss dword [ebp - 0x24], xmm1
jb 0x4633c1
mov eax, dword [0x544e38]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x4633c1
movss xmm3, dword [0x540c40]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x4633c1
mov eax, dword [0x544e3c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x4633c1
mov eax, dword [0x544e4c]
cmp byte [eax + 0x14c], 0
je 0x4633c1
mov eax, dword [0x545268]
cmp eax, 2
je 0x463342
mov dword [0x544e58], esi
cmp esi, 3
jne 0x4633b4
cmp eax, 2
jne 0x4633da
mov dword [0x544e58], 1
mov dword [0x545268], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.00449c60
call fcn.00462ef0
mov ecx, dword [ebp - 0xc]
cmp ecx, 0xf
jbe 0x4633ad
mov edx, dword [ebp - 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4633a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4637e3
push ecx
push edx
call fcn.004b4ed8
add esp, 8
movss xmm1, dword [ebp - 0x24]
jmp 0x4633da
cmp eax, 2
je 0x4633da
mov dword [0x545268], esi
jmp 0x4633da
mov dword [0x544e58], 0
cmp esi, 3
jne 0x4633da
mov dword [0x545268], 0
movss xmm2, dword [0x540c78]
comiss xmm1, xmm2
jb 0x4634c7
mov eax, dword [0x544fa8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x4634c7
movss xmm3, dword [0x540c7c]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x4634c7
mov eax, dword [0x544fac]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x4634c7
mov eax, dword [0x544e4c]
cmp byte [eax + 0x14c], 0
je 0x4634c7
mov eax, dword [0x54529c]
cmp eax, 2
je 0x463471
mov dword [0x544e5c], esi
cmp esi, 3
jne 0x4634ba
cmp eax, 2
jne 0x4634e0
cmp dword [0x540cbc], 0xf
mov eax, 0x540ca8
push 5
cmova eax, dword [0x540ca8]
push 0
push 0
push eax
push 0
push 0
mov dword [0x544e5c], 1
mov dword [0x54529c], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
movss xmm1, dword [ebp - 0x24]
jmp 0x4634e0
cmp eax, 2
je 0x4634e0
mov dword [0x54529c], esi
jmp 0x4634e0
mov dword [0x544e5c], 0
cmp esi, 3
jne 0x4634e0
mov dword [0x54529c], 0
movss xmm2, dword [0x540cd8]
comiss xmm1, xmm2
jb 0x46358d
mov eax, dword [0x545014]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x46358d
movss xmm3, dword [0x540cdc]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x46358d
mov eax, dword [0x545018]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x46358d
mov eax, dword [0x544e4c]
cmp byte [eax + 0x14c], 0
je 0x46358d
mov eax, dword [0x545274]
cmp eax, 2
je 0x46356f
mov dword [0x544e60], esi
cmp esi, 3
jne 0x463580
call fcn.00463120
movss xmm1, dword [ebp - 0x24]
jmp 0x4635a6
cmp eax, 2
je 0x4635a6
mov dword [0x545274], esi
jmp 0x4635a6
mov dword [0x544e60], 0
cmp esi, 3
jne 0x4635a6
mov dword [0x545274], 0
movss xmm2, dword [0x540c9c]
comiss xmm1, xmm2
jb 0x46364d
mov eax, dword [0x544fd0]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x46364d
movss xmm3, dword [0x540ca0]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x46364d
mov eax, dword [0x544fd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x46364d
mov eax, dword [0x5452a0]
cmp eax, 2
je 0x463627
mov dword [0x544e64], esi
cmp esi, 3
jne 0x463640
cmp eax, 2
jne 0x463666
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
movss xmm1, dword [ebp - 0x24]
jmp 0x463666
cmp eax, 2
je 0x463666
mov dword [0x5452a0], esi
jmp 0x463666
mov dword [0x544e64], 0
cmp esi, 3
jne 0x463666
mov dword [0x5452a0], 0
movss xmm2, dword [0x540c48]
comiss xmm1, xmm2
jb 0x4637ba
mov eax, dword [0x544f50]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x4637ba
movss xmm2, dword [0x540c4c]
movd xmm1, edi
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm2
jb 0x4637ba
mov eax, dword [0x544f54]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52f040]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x4637ba
mov eax, dword [0x544e4c]
cmp byte [eax + 0x14c], 0
je 0x4637ba
mov eax, dword [0x545294]
cmp eax, 2
je 0x463705
mov dword [0x544e68], esi
cmp esi, 3
jne 0x46379f
cmp eax, 2
jne 0x4637d3
mov dword [0x544e68], 1
mov dword [0x545294], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.00449c60
cmp dword [0x540d0c], 0xf
mov eax, 0x540cf8
push 5
cmova eax, dword [0x540cf8]
push 0
push 0
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0xc]
cmp ecx, 0xf
jbe 0x4637d3
mov edx, dword [ebp - 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x463785
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4637e3
push ecx
push edx
call fcn.004b4ed8
add esp, 8
pop edi
pop esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004b4e90
mov esp, ebp
pop ebp
ret
cmp eax, 2
je 0x4637d3
mov dword [0x545294], esi
pop edi
pop esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004b4e90
mov esp, ebp
pop ebp
ret
mov dword [0x544e68], 0
cmp esi, 3
jne 0x4637d3
mov dword [0x545294], 0
mov ecx, dword [ebp - 8]
pop edi
xor ecx, ebp
pop esi
call fcn.004b4e90
mov esp, ebp
pop ebp
ret
call fcn.004bd1a0
int3