Function at 0x47d908
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x13
push 0
push 0
dec ecx
jne 0x47d910
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x47decd
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004762b8
mov eax, 0x47dee4
call fcn.00477270
mov eax, dword [0x483518]
call fcn.00403dd8
call fcn.00402c94
mov eax, 0x47def8
call fcn.00477270
lea eax, [ebp - 0x14]
call fcn.00472480
cmp dword [ebp - 0x14], 0
jne 0x47d967
lea eax, [ebp - 0x14]
call fcn.00476b08
cmp dword [ebp - 0x14], 0
je 0x47dea2
mov eax, dword [ebp - 0x14]
call fcn.00475c0c
test al, al
jne 0x47d98c
mov eax, 0x47df0c
call fcn.00477270
jmp 0x47dea2
mov eax, dword [ebp - 0x14]
call fcn.00402cd0
call fcn.00402c94
call fcn.004762b8
mov eax, 0x47df1c
call fcn.00477270
lea eax, [ebp - 0x18]
call fcn.0047d1e4
mov eax, 0x47df30
call fcn.00477270
call fcn.004762b8
lea eax, [ebp - 0x10]
call fcn.0047d1e4
mov eax, dword [ebp - 0x10]
call fcn.0047cd70
test al, al
je 0x47d9d8
call fcn.0047ce10
mov dl, 1
mov eax, dword [0x417024]
call fcn.00404304
mov dword [ebp - 4], eax
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x14]
call fcn.0041fd20
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0x47da0d
mov eax, 0x47df44
call fcn.00470148
jmp 0x47dea2
xor eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x47da7c
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x2c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.0040943c
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
mov edx, 0x47df6c
call fcn.004053ec
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
call fcn.0040943c
mov eax, dword [ebp - 0x30]
pop edx
call fcn.004056e4
test eax, eax
je 0x47da74
mov bl, 1
inc dword [ebp - 0x20]
inc dword [ebp - 0x1c]
dec dword [ebp - 0x24]
jne 0x47da2a
mov eax, dword [ebp - 0x18]
mov edx, 0x47df78
call fcn.004054ec
jne 0x47da9b
mov eax, 0x47df88
call fcn.00409b2c
test al, al
je 0x47da9b
mov bl, 1
call fcn.004762b8
test bl, bl
jne 0x47dacb
push 0x47df98
push dword [ebp - 0x18]
push 0x47dfcc
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.00405460
mov eax, dword [ebp - 0x38]
call fcn.00470148
jmp 0x47dea2
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
call fcn.00476748
mov edx, dword [ebp - 0x3c]
lea eax, [ebp - 0x14]
call fcn.00405178
mov eax, 0x47dfe8
call fcn.00477270
push 0x50
push 1
call fcn.00420914
push eax
call fcn.0042090c
mov edx, eax
lea eax, [ebp - 0x14]
pop ecx
call fcn.00472450
mov edx, dword [ebp - 0x14]
mov eax, 0x47dffc
call fcn.004056e4
test eax, eax
je 0x47db25
mov eax, 0x47e008
call fcn.00470148
jmp 0x47dea2
mov eax, 0x47e044
call fcn.00477270
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x20]
call fcn.00409618
mov eax, dword [ebp - 0x40]
call fcn.004700ec
mov eax, 0x47e054
call fcn.00477270
mov eax, 0x47e068
call fcn.00477270
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x18]
call fcn.0040943c
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 0x18]
call fcn.00405178
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 0x10]
call fcn.0040943c
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 0x10]
call fcn.00405178
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x47de27
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x50]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x4c]
call fcn.0040943c
mov eax, dword [ebp - 0x4c]
push eax
lea eax, [ebp - 0x58]
mov ecx, dword [ebp - 0x18]
mov edx, 0x47df6c
call fcn.004053ec
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x54]
call fcn.0040943c
mov eax, dword [ebp - 0x54]
pop edx
call fcn.004056e4
test eax, eax
je 0x47de1b
call fcn.0046ff6c
lea ecx, [ebp - 0x5c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0xc]
call fcn.004767cc
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 0xc]
call fcn.004053a0
mov ecx, eax
mov edx, 3
mov eax, dword [ebp - 0xc]
call fcn.00405600
mov eax, dword [ebp - 0x60]
push eax
lea eax, [ebp - 0x64]
mov edx, dword [0x483558]
add edx, 6
call fcn.00405344
mov edx, dword [ebp - 0x64]
lea eax, [ebp - 0xc]
pop ecx
call fcn.004053ec
xor eax, eax
push ebp
push 0x47dc8f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00475c0c
test al, al
jne 0x47dc85
push 0
push 0x47e07c
push dword [ebp - 0xc]
push 0x47e094
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.00405460
mov eax, dword [ebp - 0x68]
call fcn.004055a0
push eax
call sub.kernel32.dll_WinExec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47dcab
push 0x47e0e4
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x6c]
push 0x47e0f4
mov eax, dword [0x48381c]
mov edx, 3
call fcn.00405460
mov eax, dword [ebp - 0x10]
call fcn.0047cd70
test al, al
je 0x47dd3b
mov eax, dword [0x48381c]
push dword [eax]
push 0x47e100
lea eax, [ebp - 0x70]
mov edx, 0x4d7ac4
call fcn.00405344
push dword [ebp - 0x70]
push 0x47e110
lea eax, [ebp - 0x74]
mov edx, 0x4d7ac8
call fcn.00405344
push dword [ebp - 0x74]
push 0x47e120
lea eax, [ebp - 0x78]
mov edx, 0x4d7acb
call fcn.00405344
push dword [ebp - 0x78]
push 0x47e130
mov eax, dword [0x48381c]
mov edx, 8
call fcn.00405460
lea ecx, [ebp - 0x84]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84]
lea edx, [ebp - 0x80]
call fcn.00476748
mov eax, dword [ebp - 0x80]
lea edx, [ebp - 0x7c]
call fcn.004766c8
push dword [ebp - 0x7c]
push 0x47df6c
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0x10]
call fcn.0040943c
push dword [ebp - 0x88]
lea eax, [ebp - 8]
mov edx, 3
call fcn.00405460
mov eax, dword [0x48381c]
push dword [eax]
push 0x47e094
push dword [ebp - 0xc]
push 0x47dffc
push dword [ebp - 8]
push 0x47e094
mov eax, dword [0x48381c]
mov edx, 6
call fcn.00405460
lea ecx, [ebp - 0x90]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x8c]
call fcn.00476748
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x48381c]
mov eax, dword [eax]
call fcn.004763e0
test al, al
jne 0x47de1b
mov eax, 0x47e13c
call fcn.00477270
mov eax, 0x47e14c
call fcn.00477270
call fcn.004700c4
mov ebx, eax
mov eax, ebx
call fcn.00402f20
cmp al, 0x53
je 0x47dea2
inc dword [ebp - 0x1c]
dec dword [ebp - 0x24]
jne 0x47db9e
mov eax, dword [0x4833e0]
mov eax, dword [eax]
call fcn.00402cd0
call fcn.00402c94
mov eax, dword [ebp - 4]
call fcn.00404334
call fcn.004762b8
mov eax, 0x47e160
call fcn.00470148
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 0x20]
call fcn.00409618
push dword [ebp - 0x98]
push 0x47e180
lea eax, [ebp - 0x9c]
mov edx, dword [0x483558]
add edx, 6
call fcn.00405344
push dword [ebp - 0x9c]
push 0x47e1b4
lea eax, [ebp - 0x94]
mov edx, 4
call fcn.00405460
mov eax, dword [ebp - 0x94]
call fcn.00470148
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47ded4
lea eax, [ebp - 0x9c]
mov edx, 0x1e
call fcn.00405104
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00405104
ret