Function at 0x4376f0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xb
push 0
push 0
dec ecx
jne 0x4376f8
push ecx
push ebx
mov ebx, 0x448c14
xor eax, eax
push ebp
push 0x437a2f
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 4]
mov eax, 0x43f598
mov edx, 7
call fcn.0041d2fc
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.00404f78
lea edx, [ebp - 8]
mov eax, dword [ebx]
call fcn.0041cf74
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.00404b10
lea ecx, [ebp - 0xc]
mov eax, 0x4409b0
mov edx, 0x46
call fcn.0041d2fc
mov edx, dword [ebp - 0xc]
mov eax, 0x448c8c
call fcn.00404f78
lea ecx, [ebp - 0x10]
mov eax, 0x440acc
mov edx, 0xd
call fcn.0041d2fc
mov edx, dword [ebp - 0x10]
mov eax, 0x448c84
call fcn.00404f78
lea ecx, [ebp - 0x14]
mov eax, 0x440b04
mov edx, 0xd
call fcn.0041d2fc
mov edx, dword [ebp - 0x14]
mov eax, 0x448c88
call fcn.00404f78
lea ecx, [ebp - 0x18]
mov eax, 0x440b3c
mov edx, 0xd
call fcn.0041d2fc
mov edx, dword [ebp - 0x18]
mov eax, 0x448c80
call fcn.00404f78
lea ecx, [ebp - 0x20]
mov eax, 0x440b74
mov edx, 0x12
call fcn.0041d2fc
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
call fcn.00404f78
push dword [ebp - 0x1c]
push dword [ebx]
lea ecx, [ebp - 0x28]
mov eax, 0x440bc0
mov edx, 0x58
call fcn.0041d2fc
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0x24]
call fcn.00404f78
push dword [ebp - 0x24]
mov eax, 0x448c90
mov edx, 3
call fcn.00405108
lea ecx, [ebp - 0x2c]
mov eax, 0x440d24
mov edx, 0x69
call fcn.0041d2fc
mov edx, dword [ebp - 0x2c]
mov eax, 0x448c94
call fcn.00404f78
call fcn.0041cf64
test eax, eax
je 0x4378cd
push dword [0x448c8c]
lea eax, [ebp - 0x38]
mov edx, dword [0x448bd0]
call fcn.00404f78
push dword [ebp - 0x38]
push dword [0x448c84]
push dword [ebx]
push dword [0x448c80]
push dword [0x448c90]
push dword [ebx]
push dword [0x448c80]
push dword [0x448c94]
lea eax, [ebp - 0x34]
mov edx, 9
call fcn.00405108
mov eax, dword [ebp - 0x34]
call fcn.00404ef8
mov edx, eax
lea eax, [ebp - 0x30]
call fcn.00404ebc
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
lea eax, [ebp - 0x3c]
mov edx, dword [0x448c18]
call fcn.00404f98
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x40]
mov edx, dword [0x448c24]
call fcn.00404f98
mov edx, dword [ebp - 0x40]
xor eax, eax
pop ecx
call fcn.0041c67c
jmp 0x437958
push 0
push 0
push dword [0x448c8c]
lea eax, [ebp - 0x4c]
mov edx, dword [0x448bd0]
call fcn.00404f78
push dword [ebp - 0x4c]
push dword [0x448c88]
push dword [ebx]
push dword [0x448c80]
push dword [0x448c90]
push dword [ebx]
push dword [0x448c80]
push dword [0x448c94]
lea eax, [ebp - 0x48]
mov edx, 9
call fcn.00405108
mov eax, dword [ebp - 0x48]
call fcn.00404ef8
mov edx, eax
lea eax, [ebp - 0x44]
call fcn.00404ebc
mov eax, dword [ebp - 0x44]
push eax
lea eax, [ebp - 0x50]
mov edx, dword [0x448c18]
call fcn.00404f98
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x54]
mov edx, dword [0x448c24]
call fcn.00404f98
mov eax, dword [ebp - 0x54]
push eax
push 0
call sub.shell32.dll_ShellExecuteW
mov eax, 0x1388
call fcn.0041ccec
lea eax, [ebp - 0x58]
mov edx, 0x437a40
call fcn.00404f20
mov edx, dword [ebp - 0x58]
mov eax, 0x437a78
call fcn.0041dd60
lea eax, [ebp - 0x5c]
mov edx, 0x437a40
call fcn.00404f20
mov edx, dword [ebp - 0x5c]
mov eax, 0x437a94
call fcn.0041e714
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x437a39
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.00404850
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.004048b0
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.00404850
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.004048b0
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00404850
lea eax, [ebp - 0x30]
call fcn.00404838
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00404880
lea eax, [ebp - 0x24]
call fcn.004047f0
lea eax, [ebp - 0x20]
call fcn.00404814
lea eax, [ebp - 0x1c]
call fcn.004047f0
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00404880
lea eax, [ebp - 8]
call fcn.004047f0
lea eax, [ebp - 4]
call fcn.00404814
ret