Function at 0x46be9e
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call fcn.005423e0
push 2
push 0xffffffff
push 0x100c
lea ebp, [0x72a860]
push dword [ebp + 0x5c]
call sub.USER32.dll_SendMessageW
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
and ebx, ebx
jl 0x46c39e
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 4
mov ebx, dword [esp + 0x1c]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 0x24]
call fcn.00541260
sub esp, 8
fstp qword [esp]
call fcn.00540110
lea eax, [esp + 4]
push eax
call fcn.00542280
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 4
mov ebx, dword [esp + 0x1c]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 0x28]
call fcn.00541260
sub esp, 8
fstp qword [esp]
call fcn.00540110
lea eax, [esp + 8]
push eax
call fcn.00542280
call fcn.004c0efb
and eax, eax
je 0x46bf69
mov byte [esp + 0xc], 1
push dword [esp + 0x20]
mov ebx, 0x16b
cmp ebx, dword [esp]
jne 0x46c036
cmp byte [esp + 0x10], 0
je 0x46bfea
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__maps.google.com_maps__q
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x6208c0
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str.tkz16ll
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x6208c0
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c031
push edx
call fcn.00542240
pop edx
push eax
mov edx, 0x6203f0
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x6208c0
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str._3000m_data_3m1_1e3
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c36c
mov ebx, 0x16c
cmp ebx, dword [esp]
jne 0x46c0e0
cmp byte [esp + 0x10], 0
je 0x46c094
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__www.bing.com_maps_Default.aspx_where1
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x6208c0
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str.stylehlvl17
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c0db
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__www.bing.com_maps_Default.aspx_cp
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x6238e8
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str.stylehlvl17
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c36c
mov ebx, 0x16d
cmp ebx, dword [esp]
jne 0x46c18a
cmp byte [esp + 0x10], 0
je 0x46c13e
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__share.here.com_l_
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x6208c0
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str._z17pyestsatellite
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c185
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__wego.here.com__map
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x6208c0
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str._17_satellite
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c36c
mov ebx, 0x16e
cmp ebx, dword [esp]
jne 0x46c1e0
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__zoom.earth_
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x6208c0
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str._16z_sat
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c36c
mov ebx, 0x16f
cmp ebx, dword [esp]
jne 0x46c29e
cmp byte [esp + 0x10], 0
je 0x46c25d
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__www.openstreetmap.org__mlat
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, str.mlon
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str.map17_
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x620a3e
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c299
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__www.openstreetmap.org_map17_
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x620a3e
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c36c
mov ebx, 0x170
cmp ebx, dword [esp]
jne 0x46c32f
cmp byte [esp + 0x10], 0
je 0x46c2f1
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__www.opentopomap.org_marker14_
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x620a3e
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c32d
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__www.opentopomap.org_map14_
push edx
call fcn.00542310
mov edx, dword [esp + 8]
push edx
call fcn.00542310
mov edx, 0x620a3e
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x46c36c
mov ebx, 0x171
cmp ebx, dword [esp]
jne 0x46c34d
mov eax, 0x635280
push eax
push dword [esp + 0x18]
xor eax, eax
push eax
call fcn.004c85d3
jmp 0x46c36c
mov ebx, 0x172
cmp ebx, dword [esp]
jne 0x46c36c
mov eax, str._TransmitterPath.kml
push eax
push dword [esp + 0x18]
mov eax, 1
push eax
call fcn.004c85d3
pop eax
mov edx, dword [esp + 8]
xor ecx, ecx
call fcn.004fa4a0
jne 0x46c39e
push 0xa
push 0
push 0
mov eax, dword [esp + 0x14]
push eax
mov eax, 0x623e60
push eax
push 0
call sub.SHELL32.dll_ShellExecuteW
xor eax, eax
push dword [esp + 4]
call fcn.00542440
push dword [esp]
call fcn.00542440
push dword [esp + 8]
call fcn.00542440
add esp, 0x14
pop ebx
pop ebp
ret 4