Function at 0x4b4dbc
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 6
push 0
push 0
dec ecx
jne 0x4b4dc4
push ecx
push ebx
push esi
push edi
mov edi, eax
xor eax, eax
push ebp
push 0x4b50bd
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x4b5098
push dword fs:[edx]
mov dword fs:[edx], esp
call fcn.0040a228
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00464308
mov ebx, eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00464308
cmp bx, ax
jne 0x4b508e
call fcn.0040a228
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00464330
mov ebx, eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00464330
cmp bx, ax
jne 0x4b508e
xor eax, eax
xor esi, esi
jmp 0x4b4e53
mov edx, 0x4b50d8
mov eax, edi
call fcn.004b4334
cmp esi, 7
je 0x4b4e57
inc esi
test al, al
je 0x4b4e41
test al, al
je 0x4b4ebb
push 0x4b50f4
call fcn.0040a1fc
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0xc]
call fcn.0040af1c
push dword [ebp - 0xc]
push 0x4b5100
call fcn.0040a228
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x10]
call fcn.0040af34
push dword [ebp - 0x10]
push 0x4b510c
lea eax, [ebp - 8]
mov edx, 5
call fcn.00404414
mov edx, dword [ebp - 8]
mov eax, dword [edi + 0x324]
mov eax, dword [eax + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x4b4f19
push 0x4b50f4
call fcn.0040a1fc
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x18]
call fcn.0040af1c
push dword [ebp - 0x18]
push 0x4b5100
call fcn.0040a228
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x1c]
call fcn.0040af34
push dword [ebp - 0x1c]
push 0x4b5130
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00404414
mov edx, dword [ebp - 0x14]
mov eax, dword [edi + 0x324]
mov eax, dword [eax + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x1388
call sub.kernel32.dll_Sleep_1
mov byte [ebp - 1], 0
jmp 0x4b4fac
push 5
push 0
push 0
push 0x4b5154
push 0x4b5184
push 0
call sub.shell32.dll_ShellExecuteA
cmp eax, 2
je 0x4b4f4e
mov byte [ebp - 1], 1
jmp 0x4b4fac
push 0x4b50f4
call fcn.0040a1fc
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x24]
call fcn.0040af1c
push dword [ebp - 0x24]
push 0x4b5100
call fcn.0040a228
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x28]
call fcn.0040af34
push dword [ebp - 0x28]
push 0x4b5194
lea eax, [ebp - 0x20]
mov edx, 5
call fcn.00404414
mov edx, dword [ebp - 0x20]
mov eax, dword [edi + 0x324]
mov eax, dword [eax + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp byte [ebp - 1], 0
je 0x4b4f2c
push 0x4b50f4
call fcn.0040a1fc
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x30]
call fcn.0040af1c
push dword [ebp - 0x30]
push 0x4b5100
call fcn.0040a228
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x34]
call fcn.0040af34
push dword [ebp - 0x34]
push 0x4b51c4
lea eax, [ebp - 0x2c]
mov edx, 5
call fcn.00404414
mov edx, dword [ebp - 0x2c]
mov eax, dword [edi + 0x324]
mov eax, dword [eax + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x38]
call fcn.0040a1fc
fstp qword [edi + 0x388]
wait
call fcn.0040a228
fstp qword [edi + 0x380]
wait
call fcn.0040a228
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [edi + 0x338]
call fcn.00434edc
call fcn.0040a228
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00464308
movzx eax, ax
mov dword [edi + 0x390], eax
call fcn.0040a228
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00464330
movzx eax, ax
mov dword [edi + 0x394], eax
push dword [edi + 0x38c]
push dword [edi + 0x388]
mov eax, dword [edi + 0x30c]
call fcn.00434100
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b50a2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b50c4
lea eax, [ebp - 0x34]
mov edx, 0xc
call fcn.004040b8
ret