Function at 0x469ef0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffff6d0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 4], edx
mov ebx, eax
lea esi, [ebp - 0x40]
push 0x3c
push 0
push esi
call fcn.00497b00
add esp, 0xc
mov dword [esi], 0x3c
mov dword [esi + 4], 0x500
cmp byte [ebp + 0x10], 0
jne 0x469f31
or dword [esi + 4], 0x40
mov dword [esi + 0x10], ebx
cmp dword [ebp + 8], 0
je 0x469f42
mov eax, dword [ebp + 8]
mov dword [esi + 0xc], eax
jmp 0x469f66
lea edx, [ebp - 0x90]
mov ecx, 0x50
mov eax, dword [esi + 0x10]
call fcn.00468930
test al, al
je 0x469f61
lea edx, [ebp - 0x90]
jmp 0x469f63
xor edx, edx
mov dword [esi + 0xc], edx
mov dword [esi + 0x18], edi
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x14], eax
mov eax, ebx
call fcn.0040bd28
cmp ebx, eax
jne 0x469f98
push ebx
push 0x4aa418
lea edx, [ebp - 0x890]
push edx
call fcn.0049abd0
add esp, 0xc
lea ecx, [ebp - 0x890]
mov dword [esi + 0x10], ecx
mov dword [esi + 0x1c], 1
call fcn.0041043c
test eax, eax
je 0x46a072
mov eax, dword [ebp - 4]
call fcn.0040f1d4
cmp word [eax], 0
je 0x46a072
xor ebx, ebx
push 0x4aa41d
call sub.KERNEL32.DLL_GetModuleHandleA
test eax, eax
je 0x469fdb
push 0x4aa429
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov ebx, eax
test ebx, ebx
jne 0x469fe6
xor eax, eax
jmp 0x46a13f
mov edx, dword [ebp - 4]
mov dword [esi + 0x10], edx
mov eax, dword [esi + 0xc]
test eax, eax
je 0x46a00c
lea edx, [ebp - 0x930]
mov ecx, 0x1000000
call fcn.004104b4
lea edx, [ebp - 0x930]
mov dword [esi + 0xc], edx
test edi, edi
je 0x46a02b
lea edx, [ebp - 0x1130]
mov ecx, 0x1000000
mov eax, edi
call fcn.004104b4
lea eax, [ebp - 0x1130]
mov dword [esi + 0x18], eax
cmp dword [ebp + 0x14], 0
je 0x46a04d
lea edx, [ebp - 0x1930]
mov ecx, 0x1000000
mov eax, dword [ebp + 0x14]
call fcn.004104b4
lea edx, [ebp - 0x1930]
mov dword [esi + 0x14], edx
mov byte [0x4c7810], 1
push esi
call ebx
test eax, eax
jne 0x46a069
cmp dword [esi + 0xc], 0
je 0x46a069
xor ecx, ecx
mov dword [esi + 0xc], ecx
push esi
call ebx
mov byte [0x4c7810], 0
jmp 0x46a09b
mov byte [0x4c7810], 1
push esi
call sub.SHELL32.DLL_ShellExecuteExA
test eax, eax
jne 0x46a094
cmp dword [esi + 0xc], 0
je 0x46a094
xor eax, eax
mov dword [esi + 0xc], eax
push esi
call sub.SHELL32.DLL_ShellExecuteExA
mov byte [0x4c7810], 0
test eax, eax
je 0x46a0ab
call sub.KERNEL32.DLL_GetLastError
cmp eax, 0x483
jne 0x46a0b2
xor eax, eax
jmp 0x46a13f
cmp byte [ebp + 0x10], 0
jne 0x46a13d
mov eax, dword [esi + 0x38]
test eax, eax
je 0x46a0fc
mov edx, dword [0x4aa3ec]
mov dword [edx*4 + 0x4cb674], eax
mov ecx, dword [0x4aa3ec]
mov eax, dword [esi + 0x20]
mov dword [ecx*4 + 0x4cb6b4], eax
mov edx, dword [0x4aa3ec]
inc edx
and edx, 0x8000000f
jns 0x46a0f4
dec edx
or edx, 0xfffffff0
inc edx
mov dword [0x4aa3ec], edx
jmp 0x46a12f
xor ebx, ebx
mov eax, dword [ebx*4 + 0x4cb6b4]
cmp eax, dword [esi + 0x20]
jne 0x46a129
push 0
push dword [ebx*4 + 0x4cb674]
call sub.KERNEL32.DLL_WaitForSingleObject
cmp eax, 0x102
jne 0x46a129
mov edx, dword [ebx*4 + 0x4cb674]
mov dword [esi + 0x38], edx
inc ebx
cmp ebx, 0x10
jl 0x46a0fe
cmp dword [ebp + 0xc], 0
je 0x46a13d
mov ecx, dword [ebp + 0xc]
mov eax, dword [esi + 0x38]
mov dword [ecx], eax
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10