Function at 0x423b80
Capabilities:
Create process on windows

Disassembly:
mov edx, dword [0x458420]
sub esp, 8
test edx, edx
je 0x42432f
cmp dword [edx], 0
je 0x42432f
mov ecx, dword [0x44d780]
push ebx
mov ebx, dword [0x453da4]
push ebp
push esi
add ebx, 0xc7
xor esi, esi
cmp ecx, 0xffffffff
push edi
mov ebp, 0x24e
jne 0x423c89
mov eax, dword [0x4546d0]
test eax, eax
jle 0x423bd4
cmp byte [0x4546f8], 0x3f
je 0x423bd4
mov esi, eax
mov eax, dword [0x4546d4]
cmp esi, eax
jge 0x423be8
cmp byte [0x45475c], 0x3f
je 0x423be8
mov esi, eax
mov eax, dword [0x4546d8]
cmp esi, eax
jge 0x423bfc
cmp byte [0x4547c0], 0x3f
je 0x423bfc
mov esi, eax
mov eax, dword [0x4546dc]
cmp esi, eax
jge 0x423c10
cmp byte [0x454824], 0x3f
je 0x423c10
mov esi, eax
mov eax, dword [0x4546e0]
cmp esi, eax
jge 0x423c24
cmp byte [0x454888], 0x3f
je 0x423c24
mov esi, eax
mov eax, dword [0x4546e4]
cmp esi, eax
jge 0x423c38
cmp byte [0x4548ec], 0x3f
je 0x423c38
mov esi, eax
mov eax, dword [0x4546e8]
cmp esi, eax
jge 0x423c4c
cmp byte [0x454950], 0x3f
je 0x423c4c
mov esi, eax
mov eax, dword [0x4546ec]
cmp esi, eax
jge 0x423c60
cmp byte [0x4549b4], 0x3f
je 0x423c60
mov esi, eax
call dword [sym.imp.WINMM.dll_timeGetTime]
xor edx, edx
div esi
mov dword [0x458418], 0
mov dword [0x45841c], 4
mov dword [0x44d780], edx
jmp 0x423e39
mov eax, 0x4546f8
mov edi, edi
cmp dword [esi*4 + 0x452928], ecx
jg 0x423ca7
cmp dword [esi*4 + 0x4546d0], ecx
jle 0x423ca7
cmp byte [eax], 0x3f
jne 0x423cb9
add eax, 0x64
add esi, 1
cmp eax, 0x454a18
jl 0x423c90
jmp 0x423e39
mov edi, dword [esi*4 + 0x453f50]
mov eax, dword [0x45841c]
lea ecx, [edi + 0xa]
cmp eax, ecx
mov dword [0x458418], esi
jge 0x423cda
add eax, 1
mov dword [0x45841c], eax
cmp eax, 4
jge 0x423cf3
mov ecx, eax
shl ecx, 4
sub ecx, eax
add ecx, ecx
add ecx, ecx
mov ebp, 0x314
sub ebp, ecx
jmp 0x423d15
lea ecx, [edi - 0xa]
cmp eax, ecx
jle 0x423d0c
cmp eax, edi
jge 0x423d10
sub eax, edi
lea ebp, [eax + eax*4]
lea ebp, [ebp*4 + 0x314]
jmp 0x423d15
cmp eax, edi
jl 0x423d15
mov ebp, 0x348
mov eax, dword [esp + 0x20]
push eax
push 0
push 1
lea ecx, [esi + 2]
push ecx
push ebx
push ebp
mov ecx, edx
call fcn.0043f100
cmp dword [0x4546f0], 0x24e
jle 0x423e39
mov eax, dword [0x453cdc]
cmp eax, ebx
jle 0x423e39
lea edx, [ebx + 0xc2]
cmp eax, edx
jge 0x423e39
mov eax, dword [0x45841c]
cmp eax, edi
jle 0x423d6b
mov dword [0x45841c], 0
jmp 0x423d81
cmp eax, 4
jle 0x423d81
add edi, 0xfffffff6
cmp eax, edi
jge 0x423d81
mov dword [0x45841c], 5
lea eax, [ebp + 0xc2]
cmp eax, 0x31a
jge 0x423de9
push 0xffffff
push 1
push 0xc6
push ebx
push ebp
call fcn.00437040
push 0xffffff
push 1
push 0xc6
lea ecx, [ebx + 0xc1]
push ecx
push ebp
call fcn.00437040
push 0xffffff
push 0xc2
push 1
push ebx
push ebp
call fcn.00437040
push 0xffffff
push 0xc2
push 1
lea edx, [ebp + 0xc5]
push ebx
push edx
call fcn.00437040
add esp, 0x50
cmp dword [0x457580], 1
jne 0x423e39
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0
jne 0x423e39
push 0
mov ecx, 0x455610
mov dword [0x457580], 0
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
imul esi, esi, 0x64
push 1
push 0
push 0
add esi, 0x4546f8
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
xor eax, eax
cmp byte [0x4546f8], 0x3f
je 0x423e49
mov eax, 1
cmp byte [0x45475c], 0x3f
je 0x423e55
add eax, 1
cmp byte [0x4547c0], 0x3f
je 0x423e61
add eax, 1
cmp byte [0x454824], 0x3f
je 0x423e6d
add eax, 1
cmp byte [0x454888], 0x3f
je 0x423e79
add eax, 1
cmp byte [0x4548ec], 0x3f
je 0x423e85
add eax, 1
cmp byte [0x454950], 0x3f
je 0x423e91
add eax, 1
cmp byte [0x4549b4], 0x3f
je 0x423e9d
add eax, 1
cmp eax, 1
jle 0x424075
mov ecx, dword [0x4546f0]
lea eax, [ebp + 0xa0]
cmp ecx, eax
jle 0x423f80
mov edx, dword [0x453cdc]
lea esi, [ebx - 0x12]
cmp edx, esi
jle 0x423f80
lea esi, [ebp + 0xb3]
cmp ecx, esi
jge 0x423f80
cmp edx, ebx
jg 0x423f80
mov ecx, dword [0x453f70]
mov edx, dword [0x45841c]
cmp edx, ecx
jle 0x423efd
mov dword [0x45841c], 0
jmp 0x423f13
cmp edx, 4
jle 0x423f13
add ecx, 0xfffffff6
cmp edx, ecx
jge 0x423f13
mov dword [0x45841c], 5
mov edi, dword [esp + 0x20]
mov ecx, dword [0x45117c]
push edi
push 0
push 1
push 0xa
lea esi, [ebx - 0xe]
push esi
push eax
call fcn.0043f100
cmp dword [0x457580], 1
jne 0x423f9f
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], 0
jne 0x423f9f
mov eax, dword [0x458418]
mov dword [0x457580], 0
nop
sub eax, 1
jns 0x423f5a
mov eax, 7
mov ecx, dword [eax*4 + 0x452928]
test ecx, ecx
mov dword [0x44d780], ecx
jl 0x423f50
mov edx, eax
imul edx, edx, 0x64
cmp byte [edx + 0x4546f8], 0x3f
je 0x423f50
mov dword [0x458418], eax
jmp 0x423f9f
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x45117c]
push 0
push 1
push 8
lea esi, [ebx - 0xe]
push esi
push eax
call fcn.0043f100
mov edi, dword [esp + 0x20]
lea eax, [ebp + 0xb3]
cmp dword [0x4546f0], eax
jle 0x424061
mov ecx, dword [0x453cdc]
lea edx, [ebx - 0x12]
cmp ecx, edx
jle 0x424061
cmp ecx, ebx
jg 0x424061
mov edx, dword [0x453f70]
mov ecx, dword [0x45841c]
cmp ecx, edx
jle 0x423fe6
mov dword [0x45841c], 0
jmp 0x423ffc
cmp ecx, 4
jle 0x423ffc
add edx, 0xfffffff6
cmp ecx, edx
jge 0x423ffc
mov dword [0x45841c], 5
mov ecx, dword [0x45117c]
push edi
push 0
push 1
push 0xb
push esi
push eax
call fcn.0043f100
cmp dword [0x457580], 1
jne 0x424075
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0
jne 0x424075
mov eax, dword [0x458418]
mov dword [0x457580], 0
add eax, 1
cmp eax, 8
jl 0x42403b
xor eax, eax
mov ecx, dword [eax*4 + 0x452928]
test ecx, ecx
mov dword [0x44d780], ecx
jl 0x424031
mov ecx, eax
imul ecx, ecx, 0x64
cmp byte [ecx + 0x4546f8], 0x3f
je 0x424031
mov dword [0x458418], eax
jmp 0x424075
mov ecx, dword [0x45117c]
push edi
push 0
push 1
push 9
push esi
push eax
call fcn.0043f100
mov edx, dword [esp + 0x20]
mov ecx, dword [0x458420]
push edx
push 0
push 1
push 0xa
mov eax, 0x3e7
push 0x1a6
push 0
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
call fcn.0043f100
xor ebp, ebp
mov ebx, 0x454a18
jmp 0x4240b0
mov esi, dword [ebp*4 + 0x4583b8]
cmp esi, 0xffffff9d
je 0x424211
cmp byte [ebx], 0x3f
je 0x424211
cmp dword [esp + 0x10], esi
jle 0x4240d3
mov dword [esp + 0x10], esi
mov ecx, dword [ebp*4 + 0x453c08]
cmp dword [esp + 0x14], ecx
jle 0x4240e4
mov dword [esp + 0x14], ecx
cmp dword [0x4546f0], esi
jle 0x424211
mov edi, dword [ebp*4 + 0x453f70]
lea eax, [edi + esi]
cmp dword [0x4546f0], eax
jge 0x424211
cmp dword [0x453cdc], ecx
jle 0x424211
mov edx, dword [ebp*4 + 0x453ce0]
add edx, ecx
cmp dword [0x453cdc], edx
jl 0x424136
mov eax, 0xaaaaaaab
mul ebp
shr edx, 2
cmp edx, 3
jne 0x424211
push 0xffffff
push 1
push edi
push ecx
push esi
call fcn.00437040
mov eax, dword [ebp*4 + 0x453f70]
mov ecx, dword [ebp*4 + 0x453c08]
mov edx, dword [ebp*4 + 0x453ce0]
push 0xffffff
push 1
push eax
lea eax, [ecx + edx - 1]
mov ecx, dword [ebp*4 + 0x4583b8]
push eax
push ecx
call fcn.00437040
mov edx, dword [ebp*4 + 0x453ce0]
mov eax, dword [ebp*4 + 0x453c08]
mov ecx, dword [ebp*4 + 0x4583b8]
push 0xffffff
push edx
push 1
push eax
push ecx
call fcn.00437040
mov edx, dword [ebp*4 + 0x453ce0]
mov eax, dword [ebp*4 + 0x453c08]
mov ecx, dword [ebp*4 + 0x453f70]
push 0xffffff
push edx
mov edx, dword [ebp*4 + 0x4583b8]
push 1
push eax
lea eax, [ecx + edx - 1]
push eax
call fcn.00437040
add esp, 0x50
cmp dword [0x457580], 1
jne 0x424211
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], 0
jne 0x424211
push 0
mov ecx, 0x455610
mov dword [0x457580], 0
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0
push 0
push ebx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
add ebx, 0x64
add ebp, 1
cmp ebx, 0x455378
jl 0x4240b0
mov ecx, dword [esp + 0x10]
cmp ecx, 0x3e7
jge 0x424257
mov eax, dword [esp + 0x14]
cmp eax, 0x3e7
jge 0x424257
mov esi, dword [esp + 0x20]
push esi
push 0
push 1
push 0xc
add eax, 0xfffffff6
push eax
push ecx
mov ecx, dword [0x451188]
call fcn.0043f100
jmp 0x42425b
mov esi, dword [esp + 0x20]
mov edx, dword [0x4554bc]
cmp edx, dword [0x44d03c]
jle 0x42432b
cmp byte [0x453da8], 0x3f
je 0x42432b
mov eax, dword [0x4511b4]
add eax, 1
cmp eax, 0x3c
mov dword [0x4511b4], eax
mov edi, 0x18d
mov ebx, 0x22
jl 0x424333
mov dword [0x4511b4], 0
push esi
push 0
push 1
push 1
mov ecx, dword [0x458420]
push 0
push 0
call fcn.0043f100
cmp dword [0x4546f0], edi
jge 0x42432b
cmp dword [0x453cdc], ebx
jge 0x42432b
mov ecx, dword [0x458420]
push esi
push 0
push 1
push 1
push 0
push 0
call fcn.0043f100
cmp dword [0x457580], 1
jne 0x42432b
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0
jne 0x42432b
push 0
mov ecx, 0x455610
mov dword [0x457580], 0
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0
push 0
push 0x453da8
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret
cmp eax, 0x1e
jl 0x4242a4
cmp dword [0x4546f0], edi
jge 0x424350
cmp dword [0x453cdc], ebx
jl 0x4242a4
push esi
push 0
push 1
push 0
jmp 0x4242ab