Function at 0x493740
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp - 4]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push eax
lea eax, [ebp - 8]
mov edi, ecx
push eax
mov ecx, esi
call fcn.0048c250
mov al, byte [0x6e207c]
cmp al, 1
jne 0x493b75
mov ecx, edi
call fcn.0048f480
movzx eax, byte [esi + 0x971]
mov bl, 1
dec eax
mov byte [ebp + 0xb], bl
cmp eax, 0x20
ja case.0x49378e.8
movzx eax, byte [eax + 0x493bf4]
jmp dword [eax*4 + 0x493bac]
mov byte [edi + 0xbcf], 0x46
jmp case.0x49378e.1
mov byte [edi + 0xbcf], 0x47
jmp case.0x49378e.1
mov byte [edi + 0xbcf], 0x48
jmp case.0x49378e.1
mov byte [edi + 0xbcf], 0x49
jmp case.0x49378e.1
mov byte [edi + 0xbcf], 0x4a
jmp case.0x49378e.1
mov byte [edi + 0xbcf], 0x4b
jmp case.0x49378e.1
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov dword [ebp + 8], 0
lea eax, [ebp + 8]
mov dword [ebp - 0xc], 4
push eax
lea eax, [ebp - 0xc]
mov ecx, edi
push eax
movzx eax, byte [esi + 0x971]
push 1
push dword [esi + eax*4 + 0xc18]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0048eeb0
jmp case.0x49378e.1
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov dword [ebp + 8], 1
jmp 0x4937f0
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov dword [ebp + 8], 2
jmp 0x4937f0
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov dword [ebp + 8], 3
jmp 0x4937f0
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov dword [ebp + 8], 4
jmp 0x4937f0
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov dword [ebp + 8], 5
jmp 0x4937f0
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov dword [ebp + 8], 6
jmp 0x4937f0
lea ebx, [edi + 0x301c8]
push 0
mov ecx, ebx
call fcn.0040c2e0
mov ecx, ebx
test al, al
je 0x4938c5
push 0
push 0
jmp 0x493909
push 1
push 0
jmp 0x493909
lea ebx, [edi + 0x301c8]
push 5
mov ecx, ebx
call fcn.0040c2e0
mov ecx, ebx
test al, al
je 0x4938e6
push 0
push 5
jmp 0x493909
push 1
push 5
jmp 0x493909
lea ebx, [edi + 0x301c8]
push 0xa
mov ecx, ebx
call fcn.0040c2e0
mov ecx, ebx
test al, al
je 0x493905
push 0
jmp 0x493907
push 1
push 0xa
call fcn.004133f0
mov bl, byte [ebp + 0xb]
mov byte [0x6e207c], 0
mov byte [0x6e207d], 0
mov byte [0x6e207e], 0
movzx eax, byte [esi + 0x972]
dec eax
cmp eax, 0x34
ja case.0x49393e.7
movzx eax, byte [eax + 0x493c3c]
jmp dword [eax*4 + 0x493c18]
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov byte [edi + 0xbcf], 0x44
jmp 0x493b51
push 0x1f7
mov ecx, edi
call fcn.00470c40
cmp dword [0x6db9a4], 0x10
mov eax, 0x6db990
push 3
cmovae eax, dword [0x6db990]
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x493b51
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov al, byte [esi + 0x96c]
mov ecx, edi
mov byte [ebp + 0xb], al
lea eax, [ebp - 0xc]
push 0x57f94c
push eax
lea eax, [ebp + 0xb]
mov dword [ebp - 0xc], 0
push eax
push dword [esi + 0xc48]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0048f280
jmp 0x493ad4
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov al, byte [esi + 0x96c]
mov ecx, edi
mov byte [ebp + 0xb], al
lea eax, [ebp - 0xc]
push 0x57f94c
push eax
lea eax, [ebp + 0xb]
mov dword [ebp - 0xc], 1
push eax
push dword [esi + 0xc4c]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0048f280
jmp 0x493ad4
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov al, byte [esi + 0x96c]
mov ecx, edi
mov byte [ebp + 0xb], al
lea eax, [ebp - 0xc]
push 0x57f958
push eax
lea eax, [ebp + 0xb]
mov dword [ebp - 0xc], 2
push eax
push dword [esi + 0xc58]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0048f280
jmp 0x493ad4
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov al, byte [esi + 0x96c]
mov ecx, edi
mov byte [ebp + 0xb], al
lea eax, [ebp - 0xc]
push 0x57f958
push eax
lea eax, [ebp + 0xb]
mov dword [ebp - 0xc], 3
push eax
push dword [esi + 0xc5c]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0048f280
jmp 0x493ad4
push 0x1f7
mov ecx, edi
call fcn.00470c40
mov al, byte [esi + 0x96c]
mov ecx, edi
mov byte [ebp + 0xb], al
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 0xb]
mov dword [ebp - 0xc], 4
push eax
push dword [esi + 0xc6c]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0048ebf0
xor edx, edx
movzx ecx, bl
test al, al
mov byte [0x6e207c], dl
mov byte [0x6e207d], dl
cmovne ecx, edx
mov byte [0x6e207e], dl
test cl, cl
jne case.0x49393e.7
pop edi
pop esi
lea eax, [edx + 1]
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x1f7
mov ecx, edi
call fcn.00470c40
lea esi, [edi + 0x301c8]
push 0
mov ecx, esi
call fcn.004101c0
push 1
mov ecx, esi
call fcn.004101c0
push 2
mov ecx, esi
call fcn.004101c0
push 3
mov ecx, esi
call fcn.004101c0
push 4
mov ecx, esi
call fcn.004101c0
push 5
mov ecx, esi
call fcn.004101c0
push 6
mov ecx, esi
call fcn.004101c0
mov byte [0x6e207c], 0
mov byte [0x6e207d], 0
mov byte [0x6e207e], 0
push 0x47
call fcn.004b0f30
mov al, byte [0x6e207c]
add esp, 4
cmp al, 2
jne 0x493b9e
cmp byte [0x6e207e], 0
jne 0x493b9e
mov ecx, edi
call fcn.0048f480
mov byte [0x6e207c], 0
mov byte [0x6e207d], 0
mov byte [0x6e207e], 0
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 4