Function at 0x483e40
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x18ac
call fcn.0049e650
mov eax, dword [0x4c0390]
xor eax, esp
mov dword [esp + 0x18a8], eax
push ebx
mov ecx, 0x4e0c18
call fcn.004112d0
mov bl, byte [esp + 0x18b8]
test bl, bl
je 0x483e8c
test al, 1
jne 0x483e8c
xor al, al
pop ebx
mov ecx, dword [esp + 0x18a8]
xor ecx, esp
call fcn.0049e0c6
add esp, 0x18ac
ret 0x10
call fcn.004866b0
push 0
mov dword [esp + 0xc], eax
mov byte [0x4f7ca0], 0
call fcn.0047af60
lea eax, [esp + 0xc]
push eax
mov ecx, 0x4e0c18
call fcn.00413530
push 0x4e79ac
push 0x4e75ac
mov ecx, 0x4e0c18
call fcn.004134e0
mov ecx, dword [esp + 0x1c]
mov dword [0x4e614c], ecx
mov byte [0x4e586a], bl
mov dword [0x4e5d2c], 1
mov dword [0x4e580c], 0
mov dword [0x4e5830], 0
call fcn.00481c20
push 0
lea edx, [esp + 0xcb0]
push edx
mov ecx, 0x4e0c18
call fcn.004134e0
push 0
lea eax, [esp + 0x8b0]
push eax
mov ecx, 0x4e0c18
call fcn.004134a0
cmp dword [esp + 0x80], 0
mov ecx, dword [esp + 0x18c0]
mov ebx, dword [esp + 0x18b4]
push ecx
setne dl
movzx eax, dl
push eax
push ebx
lea ecx, [esp + 0xcb8]
push ecx
push 0x4b1914
push 0x4f7ca0
call fcn.00482790
test bl, bl
je 0x483f6a
push 1
call fcn.00483500
test al, al
je 0x483e72
cmp byte [esp + 0x8ac], 0
push esi
push edi
jne 0x483fa4
mov ecx, 0x4dfef0
call fcn.0043eb50
mov ecx, 0x4dfef0
mov esi, eax
call fcn.0043ebb0
cmp esi, eax
jne 0x483fa4
cmp dword [esp + 0x88], 0
je 0x483fae
cmp byte [esp + 0xa9], 0
jne 0x483fae
cmp byte [esp + 0x18c4], 0
je 0x484014
mov ecx, dword [0x4e81ac]
push 0
push 0x3ff
push 0
lea edx, [esp + 0xc0]
push edx
call fcn.004654c0
test al, al
je 0x48400d
mov ecx, 0x4b175c
lea eax, [esp + 0xb4]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x484000
test dl, dl
je 0x483ffc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x484000
add eax, 2
add ecx, 2
test dl, dl
jne 0x483fe0
xor eax, eax
jmp 0x484005
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x484095
push 0x4b175c
jmp 0x48408a
mov eax, dword [0x4e81ac]
push 0
push eax
mov ecx, 0x4dfef0
call fcn.0043ed70
test al, al
je 0x484191
mov ecx, dword [0x4e81ac]
cmp dword [ecx + 0x30], 0
jne 0x484095
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x8b4]
mov byte [esp + eax + 0xb4], cl
inc eax
test cl, cl
jne 0x484040
cmp byte [esp + 0xb4], cl
je 0x484069
lea edx, [esp + 0xb4]
push edx
call fcn.0044d9b0
lea edi, [esp + 0xb4]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x484071
mov ax, word [0x4b175c]
lea ecx, [esp + 0xb4]
mov word [edi], ax
push ecx
mov ecx, dword [0x4e81ac]
call fcn.00465450
cmp dword [esp + 0x88], 0
je 0x484111
cmp byte [esp + 0xa9], 0
jne 0x484111
mov ecx, 0x4dfef0
call fcn.0043eb50
mov esi, eax
test esi, esi
je 0x484101
cmp byte [esp + 0x8b4], 0
jne 0x484111
mov ecx, 0x4dfef0
call fcn.0043ebb0
cmp esi, eax
jne 0x484111
mov edx, dword [0x4dc1c8]
mov eax, dword [0x4c9360]
push 0x4e75ac
push 0x4826e0
push edx
push str.ASKPROCESSVOLDLG
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 0xffffffff
je 0x484191
cmp eax, 1
jne 0x484111
mov ecx, dword [0x4e81ac]
push 0x4b175c
call fcn.00465450
mov bl, byte [esp + 0x18c0]
xor ecx, ecx
mov byte [esp + 0x4b4], 0
mov word [esp + 0x10b4], cx
test bl, bl
jne 0x484198
cmp byte [0x4f7ca0], bl
je 0x484198
cmp dword [0x4e5778], 5
je 0x484198
push 0x400
lea edx, [esp + 0x10b8]
push edx
lea eax, [esp + 0x4bc]
push eax
call fcn.0047df60
push 0
push 0
push 0x4f7ca0
call fcn.004301a0
push 0x4f7ca0
call fcn.004ac688
add esp, 4
cmp eax, 0xffffffff
jne 0x484198
push 0x4f7ca0
push 0x1f7
call fcn.0045b8f0
push eax
call fcn.0048c7e0
add esp, 8
xor al, al
jmp 0x4842fb
push 0
push 0
mov ecx, 0x4e0c18
call fcn.00416070
cmp byte [esp + 0x4b4], 0
jne 0x4841bb
cmp word [esp + 0x10b4], 0
je 0x4841d0
lea ecx, [esp + 0x10b4]
push ecx
lea edx, [esp + 0x4b8]
push edx
call fcn.0047df10
call fcn.004866b0
cmp dword [esp + 0x10], eax
jne 0x484213
cmp dword [0x4db840], 0
jne 0x484213
mov byte [esp + 0xf], 1
test bl, bl
je 0x48421a
push 0x40
push 0x3a7
call fcn.0045b8f0
push eax
push 0x3a8
call fcn.0045b8f0
push eax
mov eax, dword [0x4dc1c8]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x484252
mov byte [esp + 0xf], 0
jmp 0x484252
cmp dword [0x4e6960], 0
je 0x484252
push 0x4e79ac
push 0x4e75ac
call fcn.0042f890
test al, al
jne 0x484252
mov ecx, 0x4dfef0
call fcn.004409b0
test al, al
je 0x484252
push 0
push 0
mov ecx, 0x4dfef0
call fcn.00440f30
mov ecx, 0x4dc1d0
mov byte [0x4dc1fc], 0
call fcn.00464ab0
test bl, bl
jne 0x4842f7
cmp dword [0x4db840], 0
jne 0x4842f7
cmp byte [0x4f7c9c], bl
je 0x4842f7
mov eax, 0x4f7ca0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x484288
sub eax, edx
cmp eax, 0x3fe
jae 0x4842f7
xor eax, eax
lea ebx, [ebx]
mov cl, byte [eax + 0x4f7ca0]
mov byte [esp + eax + 0xb4], cl
inc eax
test cl, cl
jne 0x4842a0
lea ecx, [esp + 0xb4]
push ecx
call fcn.0044d9b0
lea edi, [esp + 0xb4]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4842c7
mov dx, word [0x4b2160]
push 1
push 0x4b1914
push 0
lea eax, [esp + 0xc0]
push eax
push str.open
push 0
mov word [edi], dx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, byte [esp + 0xf]
mov ecx, dword [esp + 0x18b4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0049e0c6
add esp, 0x18ac
ret 0x10