Function at 0x47a080
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x15c
mov eax, dword [0x52382c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x526728]
fld dword [0x526a68]
fld qword [0x4e5400]
push esi
cmp eax, 0xa
jl 0x47a384
cmp eax, 0xaa
jg 0x47a384
fild dword [0x526800]
fstp dword [ebp - 0x108]
fld st(1)
fsub st(1)
fld dword [ebp - 0x108]
fcom st(1)
fnstsw ax
fld qword [0x4e4460]
test ah, 1
jne 0x47a1b4
fld st(2)
fadd st(1)
fcomp st(2)
fnstsw ax
test ah, 1
jne 0x47a1b4
mov ecx, dword [0x5e90d8]
fstp st(1)
fstp st(1)
xor esi, esi
fstp st(0)
fstp st(0)
fstp st(0)
cmp ecx, esi
je 0x47a112
push esi
push 1
push esi
call fcn.00488d70
push 0x44
lea eax, [ebp - 0x14c]
push esi
push eax
mov dword [0x6a42c4], esi
mov dword [0x1a3b9fc], esi
mov dword [0x63ddd4], esi
call fcn.004cce10
push 0x5f4848
lea eax, [ebp - 0x104]
push 0x4e6d90
push eax
mov dword [ebp - 0x14c], 0x44
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x118], esi
call fcn.004cce8a
add esp, 0x18
lea ecx, [ebp - 0x15c]
push ecx
lea edx, [ebp - 0x14c]
push edx
push esi
push esi
push 0x20
push esi
push esi
push esi
lea eax, [ebp - 0x104]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
fld qword [0x4e66e8]
fadd st(3), st(0)
fxch st(2)
fcom st(3)
fnstsw ax
test ah, 1
jne 0x47a29f
fld st(3)
fadd st(2)
fcomp st(1)
fnstsw ax
test ah, 1
jne 0x47a29f
mov ecx, dword [0x5e90d8]
fstp st(0)
fstp st(2)
xor esi, esi
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
cmp ecx, esi
je 0x47a1fd
push esi
push 1
push esi
call fcn.00488d70
push 0x44
lea ecx, [ebp - 0x14c]
push esi
push ecx
mov dword [0x6a42c4], esi
mov dword [0x1a3b9fc], esi
mov dword [0x63ddd4], esi
call fcn.004cce10
push 0x5e9160
lea ecx, [ebp - 0x104]
push 0x4e6d90
push ecx
mov dword [ebp - 0x14c], 0x44
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x118], esi
call fcn.004cce8a
add esp, 0x18
lea edx, [ebp - 0x15c]
push edx
lea eax, [ebp - 0x14c]
push eax
push esi
push esi
push 0x20
push esi
push esi
push esi
lea ecx, [ebp - 0x104]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
fxch st(3)
faddp st(2)
fxch st(2)
fcom st(1)
fnstsw ax
test ah, 1
jne 0x47a37e
fxch st(1)
faddp st(2)
fcompp
fnstsw ax
test ah, 0x41
jp 0x47a384
mov ecx, dword [0x5e90d8]
fstp st(0)
xor esi, esi
fstp st(0)
cmp ecx, esi
je 0x47a2dc
push esi
push 1
push esi
call fcn.00488d70
push 0x44
lea edx, [ebp - 0x14c]
push esi
push edx
mov dword [0x6a42c4], esi
mov dword [0x1a3b9fc], esi
mov dword [0x63ddd4], esi
call fcn.004cce10
push 0x1a81dc8
lea edx, [ebp - 0x104]
push 0x4e6d90
push edx
mov dword [ebp - 0x14c], 0x44
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x118], esi
call fcn.004cce8a
add esp, 0x18
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x14c]
push ecx
push esi
push esi
push 0x20
push esi
push esi
push esi
lea edx, [ebp - 0x104]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
fstp st(0)
fstp st(0)
fstp st(0)
fild dword [0x526728]
fstp dword [ebp - 0x108]
fld dword [ebp - 0x108]
fld dword [0x526708]
fld st(0)
fsubrp st(3)
fxch st(2)
fcomp st(1)
fnstsw ax
fld qword [0x4e44b8]
test ah, 0x41
jp 0x47a4b3
fxch st(1)
fcom st(2)
fnstsw ax
test ah, 0x41
jp 0x47a4b9
fild dword [0x526800]
fstp dword [ebp - 0x108]
fld dword [ebp - 0x108]
fld st(4)
fsub st(3)
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x47a4b7
fcomp st(4)
fnstsw ax
fstp st(3)
test ah, 0x41
jp 0x47a4bb
mov ecx, dword [0x5e90d8]
fstp st(2)
xor esi, esi
fstp st(0)
fstp st(0)
cmp ecx, esi
je 0x47a411
push esi
push 1
push esi
call fcn.00488d70
push 0x44
lea eax, [ebp - 0x14c]
push esi
push eax
mov dword [0x6a42c4], esi
mov dword [0x1a3b9fc], esi
mov dword [0x63ddd4], esi
call fcn.004cce10
push 0x644040
lea eax, [ebp - 0x104]
push 0x4e6d90
push eax
mov dword [ebp - 0x14c], 0x44
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x118], esi
call fcn.004cce8a
add esp, 0x18
lea ecx, [ebp - 0x15c]
push ecx
lea edx, [ebp - 0x14c]
push edx
push esi
push esi
push 0x20
push esi
push esi
push esi
lea eax, [ebp - 0x104]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
fstp st(3)
jmp 0x47a4bd
fstp st(0)
fstp st(3)
fxch st(2)
mov edx, dword [0x526800]
fld st(1)
fsub qword [0x4e53c8]
fld qword [0x4e53b8]
fsubr st(1)
fld qword [0x4e4528]
fsub st(1), st(0)
fxch st(1)
fcomp st(3)
fnstsw ax
test ah, 0x41
jp 0x47a5fa
fld st(1)
fsub st(1)
fcomp st(3)
fnstsw ax
test ah, 1
jne 0x47a5fa
lea ecx, [edx - 5]
cmp ecx, 0x17
ja 0x47a5fa
mov ecx, dword [0x5e90d8]
fstp st(2)
fstp st(0)
xor esi, esi
fstp st(1)
fstp st(0)
fstp st(0)
cmp ecx, esi
je 0x47a526
push esi
push 1
push esi
call fcn.00488d70
push edi
push 0x525258
lea ecx, [ebp - 0x84]
push 0x4e6db8
push ecx
mov dword [0x6a42c4], esi
mov dword [0x1a3b9fc], esi
mov dword [0x63ddd4], esi
mov dword [ebp - 0x14c], 0x44
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x118], esi
call fcn.004cce8a
add esp, 0xc
lea edx, [ebp - 0x15c]
push edx
lea eax, [ebp - 0x14c]
push eax
push esi
push esi
push 0x10
push esi
push esi
push esi
lea ecx, [ebp - 0x84]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov eax, dword [0x5ed6a4]
add eax, dword [0x1a3ba10]
mov ecx, dword [0x5256ec]
mov edi, dword [sym.imp.USER32.dll_MessageBoxExA]
push esi
push esi
push 0x526730
push eax
push ecx
call edi
mov edx, dword [0x5ec2a0]
add edx, dword [0x1a3ba10]
mov ecx, dword [0x5256ec]
push esi
push esi
push 0x526730
push edx
push ecx
call edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
fxch st(1)
fsub qword [0x4e4440]
fcomp st(2)
fnstsw ax
test ah, 0x41
jp 0x47a65d
fxch st(1)
fcom st(2)
fnstsw ax
test ah, 0x41
jp 0x47a65b
lea eax, [edx - 5]
cmp eax, 0x16
ja 0x47a65b
mov ecx, dword [0x5e90d8]
fstp st(0)
fstp st(1)
xor esi, esi
fstp st(0)
fstp st(0)
cmp ecx, esi
je 0x47a63b
push esi
push 1
push esi
call fcn.00488d70
xor ecx, ecx
cmp dword [0x526a08], esi
pop esi
sete cl
mov dword [0x526a08], ecx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
fxch st(1)
fld st(2)
fsubrp st(4)
fsubp st(3)
fcom st(2)
fnstsw ax
fstp st(2)
test ah, 1
jne 0x47a730
fcompp
fnstsw ax
test ah, 1
jne 0x47a734
lea eax, [edx - 0x1b]
cmp eax, 0xa0
ja 0x47a734
xor esi, esi
cmp dword [0x526a08], esi
je 0x47a734
mov ecx, dword [0x5e90d8]
cmp ecx, esi
je 0x47a6b4
push esi
push 1
push esi
call fcn.00488d70
mov edx, dword [0x526800]
lea eax, [edx - 0x1b]
cdq
and edx, 0xf
add eax, edx
sar eax, 4
mov dword [0x526714], eax
cmp eax, esi
jge 0x47a6cd
xor eax, eax
jmp 0x47a6d7
cmp eax, 9
jle 0x47a6dc
mov eax, 9
mov dword [0x526714], eax
push 4
push eax
push str.Language
push str.hhcBEOnline
push str.Software
push connect
mov dword [0x526a08], esi
call fcn.0043bca0
mov edx, dword [0x5ec2a0]
add edx, dword [0x1a3ba10]
mov eax, dword [0x5256ec]
add esp, 0x18
push esi
push esi
push 0x526730
push edx
push eax
call dword [sym.imp.USER32.dll_MessageBoxExA]
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
fstp st(1)
fstp st(0)
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.004ccd49
mov esp, ebp
pop ebp
ret