Function at 0x466b70
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x28
imul eax, dword [0x66b030], 0xe2c
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0xc], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x10], 0
push ecx
push dword [eax + 0x66b984]
lea esi, [edi + 0x31c]
lea ebx, [edi + 0x320]
call fcn.00431560
add esp, 8
test al, al
je 0x466bf9
imul eax, dword [0x66b030], 0xe2c
push 0
push dword [eax + 0x66b98c]
call fcn.00414fa0
mov eax, dword [0x68507c]
lea ecx, [edi + 0x108]
mov dword [esi], eax
add esp, 8
mov eax, dword [ecx]
mov dword [ebx], 0
mov dword [edi + 0x324], 0
call dword [eax + 4]
mov al, byte [eax]
mov byte [edi + 0x328], al
imul eax, dword [0x66b030], 0xe2c
mov dword [esp + 0x10], 0
push dword [esp + 0x10]
mov dword [esp + 0x10], 0
push dword [esp + 0x10]
push dword [eax + 0x66b98c]
call fcn.004634d0
add esp, 0xc
test al, al
je 0x467165
lea eax, [esp + 0x14]
push eax
call fcn.00481600
movss xmm0, dword [eax]
mulss xmm0, dword [0x5cfc7c]
movss dword [esp], xmm0
call fcn.004159d0
imul eax, dword [0x66b030], 0xe2c
push 0
push dword [eax + 0x66b988]
call fcn.0043c8d0
call fcn.00437ac0
imul eax, dword [0x66b030], 0xe2c
push 0
push esi
push dword [eax + 0x66b990]
call fcn.00437cb0
add esp, 0x10
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
push 1
push esi
push dword [eax + 0x66b994]
call fcn.00437cb0
add esp, 0xc
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
add esp, 8
cmp dword [esi], 1
jne 0x466cf4
lea eax, [edi + 0x328]
push eax
imul eax, dword [0x66b030], 0xe2c
push dword [eax + 0x66bc8c]
call fcn.00431e50
add esp, 8
jmp 0x466d21
push 1
call fcn.0040a340
lea eax, [edi + 0x328]
push eax
imul eax, dword [0x66b030], 0xe2c
push dword [eax + 0x66bc8c]
call fcn.00431e50
push 1
call fcn.0040caa0
add esp, 0x10
mov eax, dword [0x68507c]
cmp eax, dword [esi]
jne 0x466d39
push 1
call fcn.0040a340
mov eax, dword [0x68507c]
add esp, 4
push 0
test eax, eax
jne 0x466f1e
imul eax, dword [0x66b030], 0xe2c
push dword [eax + 0x66b9ac]
call fcn.0043c8d0
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
push 0
push ebx
push dword [eax + 0x66ba48]
call fcn.00437cb0
add esp, 0xc
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
push 1
push ebx
push dword [eax + 0x66bad8]
call fcn.00437cb0
add esp, 0xc
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
push 2
push ebx
push dword [eax + 0x66b970]
call fcn.00437cb0
imul eax, dword [0x66b030], 0xe2c
push 0
push dword [eax + 0x66b9b0]
call fcn.0043c8d0
add esp, 0x14
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
lea eax, [edi + 0x324]
push 0
push eax
imul eax, dword [0x66b030], 0xe2c
push dword [eax + 0x66ba4c]
call fcn.00437cb0
add esp, 0xc
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
mov eax, dword [0x68507c]
add esp, 8
cmp eax, dword [esi]
je 0x466e64
cmp byte [0x685080], 0
jne 0x466e64
push 1
call fcn.0040a340
add esp, 4
push 1
lea eax, [edi + 0x324]
push eax
imul eax, dword [0x66b030], 0xe2c
push dword [eax + 0x66bc88]
call fcn.00437cb0
mov eax, dword [0x68507c]
add esp, 0xc
cmp eax, dword [esi]
je 0x466ea1
cmp byte [0x685080], 0
jne 0x466ea1
push 1
call fcn.0040caa0
add esp, 4
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
push 1
call fcn.0040a340
push 2
lea eax, [edi + 0x324]
push eax
imul eax, dword [0x66b030], 0xe2c
push dword [eax + 0x66bae8]
call fcn.00437cb0
push 1
call fcn.0040caa0
mov eax, dword [ebx]
add esp, 0x1c
cmp eax, 1
je 0x466f0f
cmp eax, 2
je 0x466f0f
cmp dword [edi + 0x324], 2
jne 0x467080
mov dword [edi + 0x324], 0
jmp 0x467080
mov dword [edi + 0x324], 2
jmp 0x467080
imul eax, dword [0x66b030], 0xe2c
push dword [eax + 0x66b9ac]
call fcn.0043c8d0
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
push 0
push ebx
push dword [eax + 0x66ba48]
call fcn.00437cb0
add esp, 0xc
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
mov eax, dword [0x68507c]
add esp, 8
cmp eax, dword [esi]
je 0x466f8c
push 1
call fcn.0040a340
add esp, 4
imul eax, dword [0x66b030], 0xe2c
push 1
push ebx
push dword [eax + 0x66bae8]
call fcn.00437cb0
mov eax, dword [0x68507c]
add esp, 0xc
cmp eax, dword [esi]
je 0x466fba
push 1
call fcn.0040caa0
add esp, 4
cmp dword [edi + 0x324], 1
jne 0x466fcb
mov dword [ebx], 1
jmp 0x466fd6
cmp dword [ebx], 1
jne 0x466fd6
mov dword [ebx], 0
imul eax, dword [0x66b030], 0xe2c
push 0
push dword [eax + 0x66b9b0]
call fcn.0043c8d0
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
lea ebx, [edi + 0x324]
push 0
push ebx
push dword [eax + 0x66b974]
call fcn.00437cb0
add esp, 0xc
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
push 1
push ebx
push dword [eax + 0x66bad4]
call fcn.00437cb0
add esp, 0xc
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
push 2
push ebx
push dword [eax + 0x66bb1c]
call fcn.00437cb0
add esp, 0x14
mov eax, dword [0x68507c]
cmp eax, dword [esi]
jne 0x4670ec
push 1
call fcn.0040caa0
mov eax, dword [0x68507c]
add esp, 4
cmp eax, dword [esi]
jne 0x4670ec
mov eax, dword [edi + 0x108]
lea ecx, [edi + 0x108]
call dword [eax + 4]
mov cl, byte [edi + 0x328]
cmp cl, byte [eax]
jne 0x4670ec
imul eax, dword [0x66b030], 0xe2c
lea ecx, [esp + 0xc]
push 1
push ecx
push 0
mov dword [esp + 0x18], 0x3f800000
mov dword [esp + 0x1c], 0
push dword [eax + 0x66b958]
call fcn.00480dc0
add esp, 0x10
test eax, eax
je 0x46715b
jmp 0x467156
imul eax, dword [0x66b030], 0xe2c
lea ecx, [esp + 0xc]
push 1
push ecx
mov dword [esp + 0x14], 0x3f800000
mov dword [esp + 0x18], 0
push dword [eax + 0x66b958]
push dword [eax + 0x66b93c]
call fcn.00480dc0
add esp, 0x10
cmp eax, 1
jne 0x467151
call fcn.0040be90
call fcn.004153c0
call fcn.0040d000
imul eax, dword [0x66b030], 0xe2c
push 0
push dword [eax + 0x66b97c]
call fcn.00414fa0
add esp, 8
jmp 0x467165
cmp eax, 2
jne 0x46715b
call fcn.0040be90
call fcn.004153c0
call fcn.0040d000
imul eax, dword [0x66b030], 0xe2c
mov dword [esp + 0x10], 0
push dword [esp + 0x10]
mov dword [esp + 0x10], 0
push dword [esp + 0x10]
push dword [eax + 0x66b97c]
call fcn.004634d0
add esp, 0xc
test al, al
je 0x46728f
imul eax, dword [0x66b030], 0xe2c
push 0
push dword [eax + 0x66b980]
call fcn.0043c8d0
lea eax, [esp + 0x1c]
push eax
call fcn.0040e310
lea ecx, [esp + 0x20]
push ecx
movss xmm0, dword [eax]
divss xmm0, dword [0x5d63ac]
mov dword [esp + 0x28], 0
imul eax, dword [0x66b030], 0xe2c
movss dword [esp + 0x1c], xmm0
movss dword [esp + 0x24], xmm0
push dword [eax + 0x66bc90]
call fcn.00431560
add esp, 0x14
test al, al
je 0x467218
push 4
call fcn.0047e6e0
add esp, 4
mov dword [edi + 0x318], 2
call fcn.0040be90
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
lea ecx, [esp + 0x1c]
movss xmm0, dword [esp + 0x14]
push ecx
movss dword [esp + 0x20], xmm0
mov dword [esp + 0x24], 0
push dword [eax + 0x66bae0]
call fcn.00431560
add esp, 0x10
test al, al
je 0x46728a
call fcn.0040be90
call fcn.0040d000
imul eax, dword [0x66b030], 0xe2c
push 0
push dword [eax + 0x66b98c]
call fcn.00414fa0
add esp, 8
jmp 0x46728f
call fcn.0040d000
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
push dword [eax + 0x66b978]
call fcn.00431560
add esp, 0x10
test al, al
je 0x467309
lea eax, [esp + 0x1c]
push eax
call fcn.00465a70
add esp, 4
cmp dword [eax + 0x14], 7
jbe 0x4672ec
mov eax, dword [eax]
push 5
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x1c]
call fcn.004443f0
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.004181d0
imul eax, dword [0x66b030], 0xe2c
add esp, 8
push dword [eax + 0x66bae0]
push dword [eax + 0x66bc90]
push ecx
mov dword [esp], 0xbf800000
push dword [eax + 0x66bb30]
push dword [eax + 0x66bb2c]
push dword [eax + 0x66bb28]
call fcn.00480a30
add esp, 0x18
test al, al
je 0x467373
push 4
call fcn.0047e6e0
add esp, 4
mov dword [edi + 0x318], 1
pop edi
pop esi
pop ebx
add esp, 0x28
ret