Function at 0x423b00
Capabilities:
Create process on windows

Disassembly:
mov edx, dword [0x458420]
sub esp, 8
test edx, edx
je 0x4242af
cmp dword [edx], 0
je 0x4242af
mov ecx, dword [0x44d780]
push ebx
mov ebx, dword [0x453da4]
push ebp
push esi
add ebx, 0xc7
xor esi, esi
cmp ecx, 0xffffffff
push edi
mov ebp, 0x24e
jne 0x423c09
mov eax, dword [0x4546d0]
test eax, eax
jle 0x423b54
cmp byte [0x4546f8], 0x3f
je 0x423b54
mov esi, eax
mov eax, dword [0x4546d4]
cmp esi, eax
jge 0x423b68
cmp byte [0x45475c], 0x3f
je 0x423b68
mov esi, eax
mov eax, dword [0x4546d8]
cmp esi, eax
jge 0x423b7c
cmp byte [0x4547c0], 0x3f
je 0x423b7c
mov esi, eax
mov eax, dword [0x4546dc]
cmp esi, eax
jge 0x423b90
cmp byte [0x454824], 0x3f
je 0x423b90
mov esi, eax
mov eax, dword [0x4546e0]
cmp esi, eax
jge 0x423ba4
cmp byte [0x454888], 0x3f
je 0x423ba4
mov esi, eax
mov eax, dword [0x4546e4]
cmp esi, eax
jge 0x423bb8
cmp byte [0x4548ec], 0x3f
je 0x423bb8
mov esi, eax
mov eax, dword [0x4546e8]
cmp esi, eax
jge 0x423bcc
cmp byte [0x454950], 0x3f
je 0x423bcc
mov esi, eax
mov eax, dword [0x4546ec]
cmp esi, eax
jge 0x423be0
cmp byte [0x4549b4], 0x3f
je 0x423be0
mov esi, eax
call dword [sym.imp.WINMM.dll_timeGetTime]
xor edx, edx
div esi
mov dword [0x458418], 0
mov dword [0x45841c], 4
mov dword [0x44d780], edx
jmp 0x423db9
mov eax, 0x4546f8
mov edi, edi
cmp dword [esi*4 + 0x452928], ecx
jg 0x423c27
cmp dword [esi*4 + 0x4546d0], ecx
jle 0x423c27
cmp byte [eax], 0x3f
jne 0x423c39
add eax, 0x64
add esi, 1
cmp eax, 0x454a18
jl 0x423c10
jmp 0x423db9
mov edi, dword [esi*4 + 0x453f50]
mov eax, dword [0x45841c]
lea ecx, [edi + 0xa]
cmp eax, ecx
mov dword [0x458418], esi
jge 0x423c5a
add eax, 1
mov dword [0x45841c], eax
cmp eax, 4
jge 0x423c73
mov ecx, eax
shl ecx, 4
sub ecx, eax
add ecx, ecx
add ecx, ecx
mov ebp, 0x314
sub ebp, ecx
jmp 0x423c95
lea ecx, [edi - 0xa]
cmp eax, ecx
jle 0x423c8c
cmp eax, edi
jge 0x423c90
sub eax, edi
lea ebp, [eax + eax*4]
lea ebp, [ebp*4 + 0x314]
jmp 0x423c95
cmp eax, edi
jl 0x423c95
mov ebp, 0x348
push 7
push 0
push 1
lea ecx, [esi + 2]
push ecx
push ebx
push ebp
mov ecx, edx
call fcn.0043f010
push 7
call fcn.004155c0
cmp edx, 0x24e
jle 0x423db9
mov eax, ecx
cmp eax, ebx
jle 0x423db9
lea edx, [ebx + 0xc2]
cmp eax, edx
jge 0x423db9
mov eax, dword [0x45841c]
cmp eax, edi
jle 0x423ce5
xor eax, eax
mov dword [0x45841c], eax
jmp 0x423cfb
cmp eax, 4
jle 0x423cfb
add edi, 0xfffffff6
cmp eax, edi
jge 0x423cfb
mov dword [0x45841c], 5
lea eax, [ebp + 0xc2]
cmp eax, 0x31a
jge 0x423d69
push 7
push 0xffffff
push 1
push 0xc6
push ebx
push ebp
call fcn.00415160
push 7
push 0xffffff
push 1
push 0xc6
lea ecx, [ebx + 0xc1]
push ecx
push ebp
call fcn.00415160
push 7
push 0xffffff
push 0xc2
push 1
push ebx
push ebp
call fcn.00415160
push 7
push 0xffffff
push 0xc2
push 1
lea edx, [ebp + 0xc5]
push ebx
push edx
call fcn.00415160
nop
cmp dword [0x457580], 1
jne 0x423db9
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0
jne 0x423db9
push 0
mov ecx, 0x455610
mov dword [0x457580], 0
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
imul esi, esi, 0x64
push 1
push 0
push 0
add esi, 0x4546f8
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
xor eax, eax
cmp byte [0x4546f8], 0x3f
je 0x423dc9
mov eax, 1
cmp byte [0x45475c], 0x3f
je 0x423dd5
add eax, 1
cmp byte [0x4547c0], 0x3f
je 0x423de1
add eax, 1
cmp byte [0x454824], 0x3f
je 0x423ded
add eax, 1
cmp byte [0x454888], 0x3f
je 0x423df9
add eax, 1
cmp byte [0x4548ec], 0x3f
je 0x423e05
add eax, 1
cmp byte [0x454950], 0x3f
je 0x423e11
add eax, 1
cmp byte [0x4549b4], 0x3f
je 0x423e1d
add eax, 1
cmp eax, 1
jle 0x423ff5
push 7
call fcn.004155c0
xchg edx, ecx
nop
nop
nop
lea eax, [ebp + 0xa0]
cmp ecx, eax
jle 0x423f00
lea esi, [ebx - 0x12]
cmp edx, esi
jle 0x423f00
lea esi, [ebp + 0xb3]
cmp ecx, esi
jge 0x423f00
cmp edx, ebx
jg 0x423f00
mov ecx, dword [0x453f70]
mov edx, dword [0x45841c]
cmp edx, ecx
jle 0x423e7d
mov dword [0x45841c], 0
jmp 0x423e93
cmp edx, 4
jle 0x423e93
add ecx, 0xfffffff6
cmp edx, ecx
jge 0x423e93
mov dword [0x45841c], 5
nop
nop
nop
mov ecx, dword [0x45117c]
push 7
push 0
push 1
push 0xa
lea esi, [ebx - 0xe]
push esi
push eax
call fcn.0043f010
cmp dword [0x457580], 1
jne 0x423f1a
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], 0
jne 0x423f1a
mov eax, dword [0x458418]
mov dword [0x457580], 0
nop
sub eax, 1
jns 0x423eda
mov eax, 7
mov ecx, dword [eax*4 + 0x452928]
test ecx, ecx
mov dword [0x44d780], ecx
jl 0x423ed0
mov edx, eax
imul edx, edx, 0x64
cmp byte [edx + 0x4546f8], 0x3f
je 0x423ed0
mov dword [0x458418], eax
jmp 0x423f1a
push 7
mov ecx, dword [0x45117c]
push 0
push 1
push 8
lea esi, [ebx - 0xe]
push esi
push eax
call fcn.0043f010
xor edi, edi
push 7
call fcn.004155c0
nop
nop
lea eax, [ebp + 0xb3]
cmp edx, eax
jle 0x423fe0
nop
nop
nop
nop
nop
nop
lea edx, [ebx - 0x12]
cmp ecx, edx
jle 0x423fe0
cmp ecx, ebx
jg 0x423fe0
mov edx, dword [0x453f70]
mov ecx, dword [0x45841c]
cmp ecx, edx
jle 0x423f66
mov dword [0x45841c], 0
jmp 0x423f7c
cmp ecx, 4
jle 0x423f7c
add edx, 0xfffffff6
cmp ecx, edx
jge 0x423f7c
mov dword [0x45841c], 5
mov ecx, dword [0x45117c]
push 7
push 0
push 1
push 0xb
push esi
push eax
call fcn.0043f010
cmp dword [0x457580], 1
jne 0x423ff5
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0
jne 0x423ff5
mov eax, dword [0x458418]
mov dword [0x457580], 0
inc eax
cmp eax, 8
jl 0x423fba
xor eax, eax
mov ecx, dword [eax*4 + 0x452928]
test ecx, ecx
mov dword [0x44d780], ecx
jl 0x423fb2
mov ecx, eax
imul ecx, ecx, 0x64
cmp byte [ecx + 0x4546f8], 0x3f
je 0x423fb2
mov dword [0x458418], eax
jmp 0x423ff5
mov ecx, dword [0x45117c]
push 7
push 0
push 1
push 9
push esi
push eax
call fcn.0043f010
nop
nop
nop
mov ecx, dword [0x458420]
push 6
push 0
push 1
push 0xa
mov eax, 0x3e7
push 0x1a6
push 0
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
call fcn.0043f010
xor ebp, ebp
mov ebx, 0x454a18
mov esi, dword [ebp*4 + 0x4583b8]
cmp esi, 0xffffff9d
je 0x424191
cmp byte [ebx], 0x3f
je 0x424191
cmp dword [esp + 0x10], esi
jle 0x424049
mov dword [esp + 0x10], esi
mov ecx, dword [ebp*4 + 0x453c08]
cmp dword [esp + 0x14], ecx
jle 0x42405a
mov dword [esp + 0x14], ecx
push 6
call fcn.004155c0
cmp edx, esi
jle 0x424191
mov edi, dword [ebp*4 + 0x453f70]
lea eax, [edi + esi]
cmp edx, eax
jge 0x424191
mov eax, dword [ebp*4 + 0x453c08]
cmp ecx, eax
jle 0x424191
mov edx, dword [ebp*4 + 0x453ce0]
add edx, eax
cmp ecx, edx
jl 0x4240aa
mov eax, 0xaaaaaaab
mul ebp
shr edx, 2
cmp edx, 3
jne 0x424191
push 6
push 0xffffff
push 1
push edi
push eax
push esi
call fcn.00415160
push 6
mov eax, dword [ebp*4 + 0x453f70]
mov ecx, dword [ebp*4 + 0x453c08]
mov edx, dword [ebp*4 + 0x453ce0]
push 0xffffff
push 1
push eax
lea eax, [ecx + edx - 1]
mov ecx, dword [ebp*4 + 0x4583b8]
push eax
push ecx
call fcn.00415160
push 6
mov edx, dword [ebp*4 + 0x453ce0]
mov eax, dword [ebp*4 + 0x453c08]
mov ecx, dword [ebp*4 + 0x4583b8]
push 0xffffff
push edx
push 1
push eax
push ecx
call fcn.00415160
push 6
nop
nop
nop
nop
mov edx, dword [ebp*4 + 0x453ce0]
mov eax, dword [ebp*4 + 0x453c08]
mov ecx, dword [ebp*4 + 0x453f70]
push 0xffffff
push edx
mov edx, dword [ebp*4 + 0x4583b8]
push 1
push eax
lea eax, [ecx + edx - 1]
push eax
call fcn.00415160
nop
nop
nop
cmp dword [0x457580], 1
jne 0x424191
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], 0
jne 0x424191
push 0
mov ecx, 0x455610
mov dword [0x457580], 0
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0
push 0
push ebx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
add ebx, 0x64
add ebp, 1
cmp ebx, 0x455378
jl 0x424026
mov ecx, dword [esp + 0x10]
cmp ecx, 0x3e7
jge 0x4241d7
mov eax, dword [esp + 0x14]
cmp eax, 0x3e7
jge 0x4241d7
nop
nop
nop
push 6
push 0
push 1
push 0xc
add eax, 0xfffffff6
push eax
push ecx
mov ecx, dword [0x451188]
call fcn.0043f010
jmp 0x4241db
mov esi, dword [esp + 0x20]
mov edx, dword [0x4554bc]
cmp edx, dword [0x44d03c]
jle 0x4242ab
cmp byte [0x453da8], 0x3f
je 0x4242ab
mov eax, dword [0x4511b4]
add eax, 1
cmp eax, 0x3c
mov dword [0x4511b4], eax
mov edi, 0x18d
mov ebx, 0x22
jl 0x4242b3
mov dword [0x4511b4], 0
push esi
push 0
push 1
push 1
mov ecx, dword [0x458420]
push 0
push 0
call fcn.0043f010
cmp dword [0x4546f0], edi
jge 0x4242ab
cmp dword [0x453cdc], ebx
jge 0x4242ab
mov ecx, dword [0x458420]
push esi
push 0
push 1
push 1
push 0
push 0
call fcn.0043f010
cmp dword [0x457580], 1
jne 0x4242ab
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0
jne 0x4242ab
push 0
mov ecx, 0x455610
mov dword [0x457580], 0
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0
push 0
push 0x453da8
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret
cmp eax, 0x1e
jl 0x424224
cmp dword [0x4546f0], edi
jge 0x4242d0
cmp dword [0x453cdc], ebx
jl 0x424224
push esi
push 0
push 1
push 0
jmp 0x42422b