Function at 0x464ffd
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
push esi
xor ebx, ebx
push edi
mov edi, ecx
cmp byte [ebp + 0xc], bl
jne 0x46501f
push dword [ebp + 8]
call fcn.0046497f
mov byte [ebp + 0xf], 1
test al, al
jne 0x465022
mov byte [ebp + 0xf], bl
push dword [ebp + 8]
lea ecx, [ebp - 4]
call fcn.004a0fd9
lea ecx, [ebp - 4]
call fcn.004a0ff9
mov edx, 0x51df94
mov ecx, eax
call fcn.0049fbbd
test al, al
je 0x4650ba
push 0x3a
push dword [ebp + 8]
call sub.msvcrt.dll_wcschr
pop ecx
pop ecx
cmp eax, ebx
je 0x4650ba
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
inc ecx
inc ecx
cmp dx, bx
jne 0x46505a
sub ecx, esi
sar ecx, 1
cmp ecx, 3
jbe 0x4650ba
lea ecx, [eax + 6]
call fcn.0042876e
mov esi, eax
push 0x2f
push esi
call sub.msvcrt.dll_wcschr
pop ecx
pop ecx
cmp eax, ebx
je 0x46508a
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp + 8]
push eax
mov ecx, 0x88ddec
call fcn.00409044
mov ecx, dword [ebp + 8]
push esi
lea eax, [ebp - 0xc]
push eax
call fcn.0040876d
mov dl, 1
mov ecx, esi
call fcn.00479b79
mov ecx, dword [ebp - 0xc]
cmp ecx, ebx
je 0x4650ba
call fcn.00406bc3
lea ecx, [ebp - 4]
call fcn.004a0ff9
mov edx, 0x51e164
mov ecx, eax
call fcn.0049fbbd
test al, al
je 0x465109
mov eax, dword [ebp - 4]
add eax, 0x10
push eax
push 0x51e150
call fcn.0049f9e2
pop ecx
pop ecx
mov ecx, 0x512be0
mov esi, eax
call fcn.0042876e
push eax
push esi
push 0x8048
push dword [0x88f7f8]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x465265
lea ecx, [ebp - 4]
call fcn.004a0ff9
mov edx, 0x51a2b8
mov ecx, eax
call fcn.0049fbbd
test al, al
jne 0x46517e
lea ecx, [ebp - 4]
call fcn.004a0ff9
mov edx, 0x51a2a4
mov ecx, eax
call fcn.0049fbbd
test al, al
jne 0x46517e
lea ecx, [ebp - 4]
call fcn.004a0ff9
mov edx, 0x51e130
mov ecx, eax
call fcn.0049fbbd
test al, al
je 0x465265
mov ecx, dword [ebp - 4]
add ecx, 0x1e
call fcn.0049e64a
push eax
push 0x51e124
call fcn.0049f991
pop ecx
pop ecx
mov edx, eax
mov ecx, 0x11b
call fcn.004c9f62
jmp 0x465265
lea ecx, [ebp - 4]
mov byte [ebp + 0xb], bl
call fcn.004a0ff9
mov ecx, eax
call fcn.0049e64a
push eax
lea ecx, [ebp - 0xc]
call fcn.004a0e73
push ebx
lea eax, [ebp + 0xb]
push eax
push ebx
lea ecx, [ebp - 0xc]
call fcn.004a0e99
push eax
lea ecx, [ebp - 0x50]
call fcn.00483188
mov ecx, dword [ebp - 0x48]
call fcn.0049e604
push eax
lea ecx, [ebp - 8]
call fcn.004a0fd9
lea ecx, [ebp - 8]
cmp byte [ebp + 0xb], bl
jne 0x4651cc
lea ecx, [ebp - 4]
call fcn.004a0ff9
mov esi, eax
mov edx, 0x51e114
mov ecx, esi
call fcn.0049fc6f
test al, al
je 0x4651ea
mov ecx, 0x512be0
jmp 0x4651ff
mov edx, 0x51e0fc
mov ecx, esi
call fcn.0049fc6f
test al, al
je 0x46522a
mov ecx, 0x51e0e8
call fcn.0042876e
lea ecx, [ebp - 4]
mov esi, eax
call fcn.004a0ff9
mov ecx, eax
call fcn.0042876e
push esi
push eax
push 0x8048
push dword [0x88f7f8]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x46524d
cmp byte [ebp + 0xf], bl
jne 0x46524d
cmp byte [edi + 0x40], bl
jne 0x46524d
push 5
push ebx
push ebx
lea ecx, [ebp - 4]
call fcn.004a0ff9
push eax
push 0x510edc
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 8]
call fcn.004a0c7d
lea ecx, [ebp - 0x50]
call fcn.00483177
lea ecx, [ebp - 0xc]
call fcn.004a0c7d
lea ecx, [ebp - 4]
call fcn.004a0c7d
mov al, byte [ebp + 0xf]
pop edi
pop esi
pop ebx
leave
ret 8