Function at 0x472af0
Capabilities:
Create a process with modified i/o handles and window
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x558
mov eax, dword [0x52382c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x6a5790]
mov edx, dword [0x6a5794]
push ebx
push esi
mov esi, dword [0x1a3c7ec]
xor ebx, ebx
cmp esi, ebx
je 0x472b1f
add edx, 0x41
mov ecx, dword [0x526728]
sub ecx, eax
mov eax, dword [0x526800]
sub eax, edx
lea edx, [ecx - 0x115]
cmp edx, 0xf
ja 0x472b52
lea edx, [eax - 3]
cmp edx, 0xf
ja 0x472b52
xor eax, eax
cmp esi, ebx
sete al
mov dword [0x1a3c7ec], eax
jmp 0x472be9
lea edx, [ecx - 0x50]
cmp edx, 0x28
ja 0x472b64
cmp eax, 2
jl 0x472b64
cmp eax, 0x12
jle 0x472b74
lea edx, [ecx - 0x7d]
cmp edx, 0x25
ja 0x472b85
lea edx, [eax - 0x43]
cmp edx, 0x10
ja 0x472b85
push 0x15
cmp byte [0x6a5818], bl
jne 0x472be1
call fcn.00470df0
jmp 0x472be6
cmp ecx, 0xdc
jl 0x472c0c
cmp ecx, 0x101
jg 0x472bae
lea edx, [eax - 0x26]
cmp edx, 0x10
ja 0x472bae
push 0x16
cmp byte [0x6a5838], bl
jne 0x472be1
call fcn.00470df0
jmp 0x472be6
cmp ecx, 0x127
jg 0x472c0c
lea edx, [eax - 0x17]
cmp edx, 0x10
ja 0x472c0c
cmp byte [0x6a5858], bl
jne 0x472bdf
cmp byte [0x6a58d8], bl
jne 0x472be9
cmp byte [0x6a5b78], bl
jne 0x472be9
push 0x17
call fcn.00470df0
jmp 0x472be6
push 0x17
call fcn.00470960
add esp, 4
mov ecx, dword [0x5e90d8]
cmp ecx, ebx
je 0x472bfc
push ebx
push 1
push ebx
call fcn.00488d70
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
lea edx, [ecx - 0xa9]
cmp edx, 0x25
ja 0x472c30
lea edx, [eax - 0x43]
cmp edx, 0x10
ja 0x472c30
push 0x18
cmp byte [0x6a5878], bl
jne 0x472be1
call fcn.00470df0
jmp 0x472be6
lea edx, [ecx - 0xd5]
cmp edx, 0x25
ja 0x472c54
lea edx, [eax - 0x43]
cmp edx, 0x10
ja 0x472c54
push 0x19
cmp byte [0x6a5898], bl
jne 0x472be1
call fcn.00470df0
jmp 0x472be6
lea edx, [ecx - 0x101]
cmp edx, 0x25
ja 0x472ca8
lea edx, [eax - 0x43]
cmp edx, 0x10
ja 0x472ca8
mov ecx, dword [0x5ecde8]
add ecx, dword [0x1a3ba10]
lea edx, [ebp - 0x404]
push ecx
push edx
call fcn.004cce8a
lea eax, [ebp - 0x404]
push ebx
push eax
call fcn.0040d780
add esp, 0x10
push 0x3f
cmp byte [0x6a5d58], bl
jne 0x472be1
call fcn.00470df0
jmp 0x472be6
lea edx, [ecx - 0x7d]
cmp edx, 0x51
ja 0x472cd0
lea edx, [eax - 0x5e]
cmp edx, 0x10
ja 0x472cd0
push 0x3b
cmp byte [0x6a5cd8], bl
jne 0x472be1
call fcn.00470df0
jmp 0x472be6
lea edx, [ecx - 0xd5]
cmp edx, 0x25
ja 0x472d71
lea edx, [eax - 0x5e]
cmp edx, 0x10
ja 0x472d71
push 0x44
lea eax, [ebp - 0x548]
push ebx
push eax
call fcn.004cce10
push 0x640e88
lea eax, [ebp - 0x504]
push 0x4e6d90
push eax
mov dword [ebp - 0x548], 0x44
mov dword [ebp - 0x544], ebx
mov dword [ebp - 0x540], ebx
mov dword [ebp - 0x53c], ebx
mov dword [ebp - 0x51c], 1
mov dword [ebp - 0x518], 1
mov dword [ebp - 0x514], ebx
call fcn.004cce8a
add esp, 0x18
lea ecx, [ebp - 0x558]
push ecx
lea edx, [ebp - 0x548]
push edx
push ebx
push ebx
push 0x20
push ebx
push ebx
push ebx
lea eax, [ebp - 0x504]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x472be9
lea edx, [ecx - 0x101]
cmp edx, 0x25
ja 0x472d9c
lea edx, [eax - 0x5e]
cmp edx, 0x10
ja 0x472d9c
push 0x35
cmp byte [0x6a5c18], bl
jne 0x472be1
call fcn.00470df0
jmp 0x472be6
lea edx, [ecx - 0x102]
cmp edx, 0x25
ja 0x472dfa
lea edx, [eax - 0x26]
cmp edx, 0x10
ja 0x472dfa
call fcn.0040d620
test eax, eax
je 0x472dcc
mov dword [0x6a3890], 0x2332
call fcn.00448c10
jmp 0x472be9
mov ecx, dword [0x5ed364]
add ecx, dword [0x1a3ba10]
lea edx, [ebp - 0x404]
push ecx
push edx
call fcn.004cce8a
lea eax, [ebp - 0x404]
push ebx
push eax
call fcn.0040d780
add esp, 0x10
jmp 0x472be9
lea edx, [ecx - 0x80]
cmp edx, 0x3c
ja 0x472e27
lea edx, [eax - 3]
cmp edx, 0x10
ja 0x472e27
call fcn.0040d620
test eax, eax
je 0x472dcc
mov dword [0x6a3890], 0x2331
call fcn.00448c10
jmp 0x472be9
lea edx, [ecx - 0x99]
cmp edx, 0x30
ja 0x472e4d
lea edx, [eax - 0x17]
cmp edx, 0x10
ja 0x472e4d
call fcn.0040d620
test eax, eax
je 0x472dcc
call fcn.0044b210
jmp 0x472be9
add ecx, 0xffffffb1
cmp ecx, 0x29
ja 0x472bfc
add eax, 0xffffffc0
cmp eax, 0x30
ja 0x472bfc
mov edx, dword [0x5ec69c]
add edx, dword [0x1a3ba10]
lea eax, [ebp - 0x404]
push edx
push eax
call fcn.004cce8a
lea ecx, [ebp - 0x404]
push ebx
push ecx
call fcn.0040d780
add esp, 0x10
push 0x40
cmp byte [0x6a5d78], bl
jne 0x472be1
call fcn.00470df0
jmp 0x472be6