Function at 0x47061c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x12b
push 0
push 0
dec ecx
jne 0x470624
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0040533c
xor eax, eax
push ebp
push 0x470a97
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x108]
mov edx, dword [ebp - 4]
mov ecx, 0xff
call fcn.00405130
lea edx, [ebp - 0x308]
mov ecx, 0xff
xor eax, eax
call fcn.00402a1c
lea eax, [ebp - 0x714]
push eax
mov ecx, 7
mov edx, 1
lea eax, [ebp - 0x108]
call fcn.00402960
lea eax, [ebp - 0x714]
mov edx, 0x470aa4
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403374
je 0x470703
lea eax, [ebp - 0x814]
push eax
mov ecx, 8
mov edx, 1
lea eax, [ebp - 0x108]
call fcn.00402960
lea eax, [ebp - 0x814]
mov edx, 0x470aac
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403374
je 0x470703
lea eax, [ebp - 0x914]
push eax
mov ecx, 4
mov edx, 1
lea eax, [ebp - 0x108]
call fcn.00402960
lea eax, [ebp - 0x914]
mov edx, 0x470ab8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403374
jne 0x470733
lea ecx, [ebp - 0x918]
mov edx, 0x470ac8
mov eax, 0x470adc
call fcn.0046f470
mov edx, dword [ebp - 0x918]
lea eax, [ebp - 0x208]
mov ecx, 0xff
call fcn.00405130
jmp 0x4709b9
lea edx, [ebp - 0x108]
mov eax, 0x470ae4
call fcn.00402cc4
mov ebx, eax
lea eax, [ebp - 0x814]
push eax
lea edx, [ebx + 1]
mov ecx, 3
lea eax, [ebp - 0x108]
call fcn.00402960
lea edx, [ebp - 0x814]
lea eax, [ebp - 0x920]
call fcn.004050f8
mov eax, dword [ebp - 0x920]
lea edx, [ebp - 0x91c]
call fcn.00470310
mov edx, dword [ebp - 0x91c]
lea eax, [ebp - 0x714]
mov ecx, 0xff
call fcn.00405130
lea edx, [ebp - 0x714]
lea eax, [ebp - 8]
mov cl, 3
call fcn.004032d4
lea eax, [ebp - 8]
mov edx, 0x470ae8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403374
je 0x4707d3
lea eax, [ebp - 8]
mov edx, 0x470aec
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403374
jne 0x470934
lea eax, [ebp - 0x814]
push eax
mov ecx, 3
mov edx, 1
lea eax, [ebp - 0x108]
call fcn.00402960
lea edx, [ebp - 0x814]
lea eax, [ebp - 0x924]
call fcn.004050f8
lea eax, [ebp - 0x924]
mov edx, 0x470af8
call fcn.0040515c
mov edx, dword [ebp - 0x924]
lea eax, [ebp - 0x714]
mov ecx, 0xff
call fcn.00405130
lea edx, [ebp - 0x714]
lea eax, [ebp - 0x313]
mov cl, 0xa
call fcn.004032d4
mov bl, byte [ebp - 0x312]
mov eax, ebx
call fcn.00402d70
add al, 0xbf
sub al, 0x1a
jae 0x470855
cmp byte [ebp - 0x311], 0x3a
je 0x47085a
cmp bl, 0x5c
jne 0x470870
lea eax, [ebp - 0x208]
lea edx, [ebp - 0x108]
call fcn.004032c8
jmp 0x470928
xor eax, eax
mov al, byte [ebp - 0x308]
cmp byte [ebp + eax - 0x308], 0x5c
jne 0x4708cf
lea eax, [ebp - 0x928]
lea edx, [ebp - 0x308]
call fcn.004050f8
lea eax, [ebp - 0x928]
push eax
lea eax, [ebp - 0x92c]
lea edx, [ebp - 0x108]
call fcn.004050f8
mov edx, dword [ebp - 0x92c]
pop eax
call fcn.0040515c
mov edx, dword [ebp - 0x928]
lea eax, [ebp - 0x208]
mov ecx, 0xff
call fcn.00405130
jmp 0x470928
lea eax, [ebp - 0x934]
lea edx, [ebp - 0x308]
call fcn.004050f8
push dword [ebp - 0x934]
push 0x470b04
lea eax, [ebp - 0x938]
lea edx, [ebp - 0x108]
call fcn.004050f8
push dword [ebp - 0x938]
lea eax, [ebp - 0x930]
mov edx, 3
call fcn.00405214
mov edx, dword [ebp - 0x930]
lea eax, [ebp - 0x208]
mov ecx, 0xff
call fcn.00405130
mov byte [ebp - 0x108], 0
jmp 0x4709b9
mov edx, 0x470b08
lea eax, [ebp - 0x94c]
call fcn.004032c8
lea edx, [ebp - 8]
lea eax, [ebp - 0x94c]
mov cl, 8
call fcn.00403298
lea edx, [ebp - 0x94c]
lea eax, [ebp - 0x940]
call fcn.004050f8
mov edx, dword [ebp - 0x940]
lea ecx, [ebp - 0x93c]
mov eax, 0x470adc
call fcn.0046f470
mov edx, dword [ebp - 0x93c]
lea eax, [ebp - 0x208]
mov ecx, 0xff
call fcn.00405130
cmp byte [ebp - 0x208], 0
jne 0x4709b9
lea eax, [ebp - 0x208]
lea edx, [ebp - 0x108]
call fcn.004032c8
mov byte [ebp - 0x108], 0
jmp 0x4709b9
call sub.user32.dll_WaitMessage
call fcn.0046f6c8
test al, al
jne 0x4709b4
lea eax, [ebp - 0x950]
lea edx, [ebp - 0x208]
call fcn.004050f8
mov edx, dword [ebp - 0x950]
lea eax, [ebp - 0x513]
call fcn.00409aec
lea eax, [ebp - 0x954]
lea edx, [ebp - 0x108]
call fcn.004050f8
mov edx, dword [ebp - 0x954]
lea eax, [ebp - 0x413]
call fcn.00409aec
lea eax, [ebp - 0x958]
lea edx, [ebp - 0x308]
call fcn.004050f8
mov edx, dword [ebp - 0x958]
lea eax, [ebp - 0x613]
call fcn.00409aec
push 1
lea eax, [ebp - 0x613]
push eax
lea eax, [ebp - 0x413]
push eax
lea eax, [ebp - 0x513]
push eax
push 0x470b10
mov eax, dword [0x49b178]
mov eax, dword [eax]
push eax
call sub.shell32.dll_ShellExecuteA
jmp 0x470a58
call sub.user32.dll_WaitMessage
call fcn.0046f6c8
test al, al
jne 0x470a53
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x470a9e
lea eax, [ebp - 0x958]
mov edx, 3
call fcn.00404ec0
lea eax, [ebp - 0x940]
mov edx, 0xb
call fcn.00404ec0
lea eax, [ebp - 4]
call fcn.00404e9c
ret