Function at 0x484380
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x18ac
call fcn.0049ebb0
mov eax, dword [0x4c03a0]
xor eax, esp
mov dword [esp + 0x18a8], eax
push ebx
mov ecx, 0x4e0c60
call fcn.004112e0
mov bl, byte [esp + 0x18b8]
test bl, bl
je 0x4843cc
test al, 1
jne 0x4843cc
xor al, al
pop ebx
mov ecx, dword [esp + 0x18a8]
xor ecx, esp
call fcn.0049e626
add esp, 0x18ac
ret 0x10
call fcn.00486bf0
push 0
mov dword [esp + 0xc], eax
mov byte [0x4f7ce8], 0
call fcn.0047b480
lea eax, [esp + 0xc]
push eax
mov ecx, 0x4e0c60
call fcn.00413570
push 0x4e79f4
push 0x4e75f4
mov ecx, 0x4e0c60
call fcn.00413520
mov ecx, dword [esp + 0x1c]
mov dword [0x4e6194], ecx
mov byte [0x4e58b2], bl
mov dword [0x4e5d74], 1
mov dword [0x4e5854], 0
mov dword [0x4e5878], 0
call fcn.00482160
push 0
lea edx, [esp + 0xcb0]
push edx
mov ecx, 0x4e0c60
call fcn.00413520
push 0
lea eax, [esp + 0x8b0]
push eax
mov ecx, 0x4e0c60
call fcn.004134e0
cmp dword [esp + 0x80], 0
mov ecx, dword [esp + 0x18c0]
mov ebx, dword [esp + 0x18b4]
push ecx
setne dl
movzx eax, dl
push eax
push ebx
lea ecx, [esp + 0xcb8]
push ecx
push 0x4b1914
push 0x4f7ce8
call fcn.00482cd0
test bl, bl
je 0x4844aa
push 1
call fcn.00483a40
test al, al
je 0x4843b2
cmp byte [esp + 0x8ac], 0
push esi
push edi
jne 0x4844e4
mov ecx, 0x4dff38
call fcn.0043ef50
mov ecx, 0x4dff38
mov esi, eax
call fcn.0043efb0
cmp esi, eax
jne 0x4844e4
cmp dword [esp + 0x88], 0
je 0x4844ee
cmp byte [esp + 0xa9], 0
jne 0x4844ee
cmp byte [esp + 0x18c4], 0
je 0x484554
mov ecx, dword [0x4e81f4]
push 0
push 0x3ff
push 0
lea edx, [esp + 0xc0]
push edx
call fcn.004659d0
test al, al
je 0x48454d
mov ecx, 0x4b175c
lea eax, [esp + 0xb4]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x484540
test dl, dl
je 0x48453c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x484540
add eax, 2
add ecx, 2
test dl, dl
jne 0x484520
xor eax, eax
jmp 0x484545
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4845d5
push 0x4b175c
jmp 0x4845ca
mov eax, dword [0x4e81f4]
push 0
push eax
mov ecx, 0x4dff38
call fcn.0043f170
test al, al
je 0x4846d1
mov ecx, dword [0x4e81f4]
cmp dword [ecx + 0x30], 0
jne 0x4845d5
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x8b4]
mov byte [esp + eax + 0xb4], cl
inc eax
test cl, cl
jne 0x484580
cmp byte [esp + 0xb4], cl
je 0x4845a9
lea edx, [esp + 0xb4]
push edx
call fcn.0044df70
lea edi, [esp + 0xb4]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4845b1
mov ax, word [0x4b175c]
lea ecx, [esp + 0xb4]
mov word [edi], ax
push ecx
mov ecx, dword [0x4e81f4]
call fcn.00465960
cmp dword [esp + 0x88], 0
je 0x484651
cmp byte [esp + 0xa9], 0
jne 0x484651
mov ecx, 0x4dff38
call fcn.0043ef50
mov esi, eax
test esi, esi
je 0x484641
cmp byte [esp + 0x8b4], 0
jne 0x484651
mov ecx, 0x4dff38
call fcn.0043efb0
cmp esi, eax
jne 0x484651
mov edx, dword [0x4dc210]
mov eax, dword [0x4c93a8]
push 0x4e75f4
push 0x482c20
push edx
push str.ASKPROCESSVOLDLG
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 0xffffffff
je 0x4846d1
cmp eax, 1
jne 0x484651
mov ecx, dword [0x4e81f4]
push 0x4b175c
call fcn.00465960
mov bl, byte [esp + 0x18c0]
xor ecx, ecx
mov byte [esp + 0x4b4], 0
mov word [esp + 0x10b4], cx
test bl, bl
jne 0x4846d8
cmp byte [0x4f7ce8], bl
je 0x4846d8
cmp dword [0x4e57c0], 5
je 0x4846d8
push 0x400
lea edx, [esp + 0x10b8]
push edx
lea eax, [esp + 0x4bc]
push eax
call fcn.0047e470
push 0
push 0
push 0x4f7ce8
call fcn.00430590
push 0x4f7ce8
call fcn.004acbe8
add esp, 4
cmp eax, 0xffffffff
jne 0x4846d8
push 0x4f7ce8
push 0x1f7
call fcn.0045be10
push eax
call fcn.0048cd40
add esp, 8
xor al, al
jmp 0x48483b
push 0
push 0
mov ecx, 0x4e0c60
call fcn.004160e0
cmp byte [esp + 0x4b4], 0
jne 0x4846fb
cmp word [esp + 0x10b4], 0
je 0x484710
lea ecx, [esp + 0x10b4]
push ecx
lea edx, [esp + 0x4b8]
push edx
call fcn.0047e420
call fcn.00486bf0
cmp dword [esp + 0x10], eax
jne 0x484753
cmp dword [0x4db888], 0
jne 0x484753
mov byte [esp + 0xf], 1
test bl, bl
je 0x48475a
push 0x40
push 0x3a7
call fcn.0045be10
push eax
push 0x3a8
call fcn.0045be10
push eax
mov eax, dword [0x4dc210]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x484792
mov byte [esp + 0xf], 0
jmp 0x484792
cmp dword [0x4e69a8], 0
je 0x484792
push 0x4e79f4
push 0x4e75f4
call fcn.0042fc80
test al, al
jne 0x484792
mov ecx, 0x4dff38
call fcn.00440db0
test al, al
je 0x484792
push 0
push 0
mov ecx, 0x4dff38
call fcn.004413b0
mov ecx, 0x4dc218
mov byte [0x4dc244], 0
call fcn.00464fc0
test bl, bl
jne 0x484837
cmp dword [0x4db888], 0
jne 0x484837
cmp byte [0x4f7ce4], bl
je 0x484837
mov eax, 0x4f7ce8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4847c8
sub eax, edx
cmp eax, 0x3fe
jae 0x484837
xor eax, eax
lea ebx, [ebx]
mov cl, byte [eax + 0x4f7ce8]
mov byte [esp + eax + 0xb4], cl
inc eax
test cl, cl
jne 0x4847e0
lea ecx, [esp + 0xb4]
push ecx
call fcn.0044df70
lea edi, [esp + 0xb4]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x484807
mov dx, word [0x4b2160]
push 1
push 0x4b1914
push 0
lea eax, [esp + 0xc0]
push eax
push str.open
push 0
mov word [edi], dx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, byte [esp + 0xf]
mov ecx, dword [esp + 0x18b4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0049e626
add esp, 0x18ac
ret 0x10