Function at 0x474d92
Capabilities:
Create process on windows

Disassembly:
enter 0x848, 2
push ebx
push ecx
push edx
mov dword [ebp - 4], eax
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x110]
call fcn.00401940
mov dword [ebp - 0xc], esp
lea edi, [ebp - 0x24c]
mov esi, 0x4d0ab4
push 0xa
call fcn.00401950
movzx eax, byte [ebp - 0x110]
movsx ebx, ax
test ebx, ebx
jle 0x474e1b
mov word [ebp - 0x250], bx
mov word [ebp - 0x234], 0
inc word [ebp - 0x234]
movsx eax, word [ebp - 0x234]
mov dword [ebp - 0x254], eax
movsx ebx, word [ebp - 0x234]
mov al, byte [ebp + ebx - 0x110]
push eax
call fcn.00414d10
mov ecx, dword [ebp - 0x254]
mov byte [ebp + ecx - 0x110], al
dec word [ebp - 0x250]
jne 0x474ddd
lea edi, [ebp - 0x118]
mov esi, 0x4d0ab5
push 4
call fcn.00401950
lea edi, [ebp - 0x228]
mov esi, 0x4d0ab6
call fcn.00401940
push 0x4d0ab7
lea eax, [ebp - 0x110]
push eax
call fcn.0040cb40
test eax, eax
ja 0x47508c
push 0x4d0abc
lea eax, [ebp - 0x110]
push eax
call fcn.0040cb40
test eax, eax
ja 0x47508c
push 0x4d0ac1
lea eax, [ebp - 0x110]
push eax
call fcn.0040cb40
test eax, eax
ja 0x47508c
lea eax, [ebp - 0x128]
push eax
movzx ebx, byte [ebp - 0x110]
add ebx, 5
push ebx
call fcn.004039f0
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4d0ac6
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
lea edi, [ebp - 0x228]
mov esi, 0x4d0acb
call fcn.00401940
cmp word [ebp - 0x230], 0
jle 0x474f46
movsx eax, word [ebp - 0x230]
push eax
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4d0acc
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4d0ad1
push 4
call fcn.00401950
jmp 0x475073
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4d0ad5
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x474fd5
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4d0ada
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4d0adf
push 4
call fcn.00401950
jmp 0x475073
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4d0ae3
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x475061
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4d0ae8
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4d0aed
push 4
call fcn.00401950
jmp 0x475073
lea edi, [ebp - 0x118]
mov esi, 0x4d0af1
push 4
call fcn.00401950
lea eax, [ebp - 0x128]
push eax
movzx ebx, byte [ebp - 0x110]
add ebx, 5
push ebx
call fcn.004031c0
jmp 0x475101
push 0x4d0af2
lea eax, [ebp - 0x110]
push eax
call fcn.0040cb40
test eax, eax
jbe 0x4750b5
lea edi, [ebp - 0x118]
mov esi, 0x4d0af7
push 4
call fcn.00401950
jmp 0x4750f0
push 0x4d0afb
lea eax, [ebp - 0x110]
push eax
call fcn.0040cb40
test eax, eax
jbe 0x4750de
lea edi, [ebp - 0x118]
mov esi, 0x4d0b00
push 4
call fcn.00401950
jmp 0x4750f0
lea edi, [ebp - 0x118]
mov esi, 0x4d0b04
push 4
call fcn.00401950
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x110]
call fcn.00401940
mov byte [ebp - 0x10], 0
lea esi, [ebp - 0x228]
mov edi, 0x4d0b08
call fcn.004147b0
test al, al
je 0x475437
lea esi, [ebp - 0x118]
mov edi, 0x4d0b09
call fcn.004147b0
test al, al
je 0x475295
lea eax, [ebp - 0x24c]
push eax
call fcn.00414b70
lea ebx, [ebp - 0x128]
push ebx
push 0xff
call fcn.004039f0
push 0xa
lea eax, [ebp - 0x240]
mov byte [eax], 0
push eax
mov eax, dword [0x4d91ad]
push dword [eax + 0xaf5]
push 0xa
call fcn.00414b40
add esp, 8
push dword [ebp - 0x128]
mov esi, 0x4d90ad
lea edi, [ebp - 0x850]
call fcn.00401b30
mov esi, 0x4d0b0d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x750]
call fcn.00401b30
lea esi, [ebp - 0x228]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x650]
call fcn.00401b30
mov esi, 0x4d0b1a
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x550]
call fcn.00401b30
lea esi, [ebp - 0x24c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x450]
call fcn.00401b30
mov esi, 0x4d0b1d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x350]
call fcn.00401b30
lea esi, [ebp - 0x240]
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x64
push 0x4e20
mov eax, dword [0x4d91ad]
call fcn.00414b12
push 0
push dword [ebp - 0x128]
call sub.kernel32.dll_WinExec
mov word [ebp - 0x234], ax
lea ebx, [ebp - 0x128]
push ebx
push 0xff
call fcn.004031c0
lea eax, [ebp - 0x124]
push eax
mov eax, dword [0x4d91ad]
call fcn.00413a22
cmp al, 0x2c
jne 0x475247
push 0x64
mov eax, dword [0x4d91ad]
call fcn.00414ae2
cmp word [ebp - 0x234], 0x1f
jle 0x475285
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x24c]
call fcn.00401940
jmp 0x475295
lea edi, [ebp - 0x228]
mov esi, 0x4d0b1f
call fcn.00401940
lea esi, [ebp - 0x228]
mov edi, 0x4d0b20
call fcn.004147b0
test al, al
je 0x475437
call fcn.00475450
cmp word [ebp - 0x230], 0
jle 0x4753d5
push 2
lea eax, [ebp - 0x124]
push eax
movsx ebx, word [ebp - 0x230]
push ebx
call sub.kernel32.dll__lread
lea edi, [ebp - 0x120]
mov esi, 0x4d0b21
push 6
call fcn.00401950
movzx eax, word [ebp - 0x124]
push eax
call fcn.00414a50
movzx ebx, al
mov byte [ebp - 0x11f], bl
movzx eax, word [ebp - 0x124]
push eax
call fcn.00414a40
movzx ebx, al
mov byte [ebp - 0x11e], bl
lea esi, [ebp - 0x120]
mov edi, 0x4d0b24
call fcn.00414a20
test al, al
je 0x47537a
push dword [ebp + 0xc]
mov ax, word [ebp - 0x230]
push eax
mov eax, dword [ebp - 4]
call fcn.004147d2
test al, al
je 0x475345
mov byte [ebp - 0x10], 1
jmp 0x475378
movzx eax, byte [0x4d8cf7]
cmp ax, 0x54
jne 0x475363
push 0x4d0b27
push 0x4d0b3b
call fcn.004135d0
jmp 0x475378
cmp ax, 0x45
jne 0x475378
push 0x4d0b52
push 0x4d0b72
call fcn.004135d0
jmp 0x4753c6
movzx eax, byte [0x4d8cf7]
cmp ax, 0x54
jne 0x4753b1
push 0x4d0b73
mov esi, 0x4d0b84
lea edi, [ebp - 0x350]
call fcn.00401b30
lea esi, [ebp - 0x120]
call fcn.00401af0
mov ebx, edi
push ebx
call fcn.004135d0
jmp 0x4753c6
cmp ax, 0x45
jne 0x4753c6
push 0x4d0ba9
push 0x4d0bbc
call fcn.004135d0
movsx eax, word [ebp - 0x230]
push eax
call sub.kernel32.dll__lclose
jmp 0x47540c
movzx eax, byte [0x4d8cf7]
cmp ax, 0x54
jne 0x4753f5
push 0x4d0bbd
lea ebx, [ebp - 0x228]
push ebx
call fcn.004135d0
jmp 0x47540c
cmp ax, 0x45
jne 0x47540c
push 0x4d0bd9
lea ebx, [ebp - 0x228]
push ebx
call fcn.004135d0
lea esi, [ebp - 0x24c]
mov edi, 0x4d0bf5
call fcn.004147b0
test al, al
je 0x475437
push 0x4d9229
mov eax, esi
push eax
call fcn.00401e60
push 0x4d9229
call fcn.00414770
mov al, byte [ebp - 0x10]
pop edx
pop ecx
pop ebx
leave
ret 8