Function at 0x46b33c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x12b
push 0
push 0
dec ecx
jne 0x46b344
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00405014
xor eax, eax
push ebp
push 0x46b7b7
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x108]
mov edx, dword [ebp - 4]
mov ecx, 0xff
call fcn.00404e08
lea edx, [ebp - 0x308]
mov ecx, 0xff
xor eax, eax
call fcn.004029fc
lea eax, [ebp - 0x714]
push eax
mov ecx, 7
mov edx, 1
lea eax, [ebp - 0x108]
call fcn.00402940
lea eax, [ebp - 0x714]
mov edx, 0x46b7c4
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403114
je 0x46b423
lea eax, [ebp - 0x814]
push eax
mov ecx, 8
mov edx, 1
lea eax, [ebp - 0x108]
call fcn.00402940
lea eax, [ebp - 0x814]
mov edx, 0x46b7cc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403114
je 0x46b423
lea eax, [ebp - 0x914]
push eax
mov ecx, 4
mov edx, 1
lea eax, [ebp - 0x108]
call fcn.00402940
lea eax, [ebp - 0x914]
mov edx, 0x46b7d8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403114
jne 0x46b453
lea ecx, [ebp - 0x918]
mov edx, 0x46b7e8
mov eax, 0x46b7fc
call fcn.00469d40
mov edx, dword [ebp - 0x918]
lea eax, [ebp - 0x208]
mov ecx, 0xff
call fcn.00404e08
jmp 0x46b6d9
lea edx, [ebp - 0x108]
mov eax, 0x46b804
call fcn.00402acc
mov ebx, eax
lea eax, [ebp - 0x814]
push eax
lea edx, [ebx + 1]
mov ecx, 3
lea eax, [ebp - 0x108]
call fcn.00402940
lea edx, [ebp - 0x814]
lea eax, [ebp - 0x920]
call fcn.00404dd0
mov eax, dword [ebp - 0x920]
lea edx, [ebp - 0x91c]
call fcn.0046aeb4
mov edx, dword [ebp - 0x91c]
lea eax, [ebp - 0x714]
mov ecx, 0xff
call fcn.00404e08
lea edx, [ebp - 0x714]
lea eax, [ebp - 8]
mov cl, 3
call fcn.00403074
lea eax, [ebp - 8]
mov edx, 0x46b808
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403114
je 0x46b4f3
lea eax, [ebp - 8]
mov edx, 0x46b80c
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00403114
jne 0x46b654
lea eax, [ebp - 0x814]
push eax
mov ecx, 3
mov edx, 1
lea eax, [ebp - 0x108]
call fcn.00402940
lea edx, [ebp - 0x814]
lea eax, [ebp - 0x924]
call fcn.00404dd0
lea eax, [ebp - 0x924]
mov edx, 0x46b818
call fcn.00404e34
mov edx, dword [ebp - 0x924]
lea eax, [ebp - 0x714]
mov ecx, 0xff
call fcn.00404e08
lea edx, [ebp - 0x714]
lea eax, [ebp - 0x313]
mov cl, 0xa
call fcn.00403074
mov bl, byte [ebp - 0x312]
mov eax, ebx
call fcn.00402b10
add al, 0xbf
sub al, 0x1a
jae 0x46b575
cmp byte [ebp - 0x311], 0x3a
je 0x46b57a
cmp bl, 0x5c
jne 0x46b590
lea eax, [ebp - 0x208]
lea edx, [ebp - 0x108]
call fcn.00403068
jmp 0x46b648
xor eax, eax
mov al, byte [ebp - 0x308]
cmp byte [ebp + eax - 0x308], 0x5c
jne 0x46b5ef
lea eax, [ebp - 0x928]
lea edx, [ebp - 0x308]
call fcn.00404dd0
lea eax, [ebp - 0x928]
push eax
lea eax, [ebp - 0x92c]
lea edx, [ebp - 0x108]
call fcn.00404dd0
mov edx, dword [ebp - 0x92c]
pop eax
call fcn.00404e34
mov edx, dword [ebp - 0x928]
lea eax, [ebp - 0x208]
mov ecx, 0xff
call fcn.00404e08
jmp 0x46b648
lea eax, [ebp - 0x934]
lea edx, [ebp - 0x308]
call fcn.00404dd0
push dword [ebp - 0x934]
push 0x46b824
lea eax, [ebp - 0x938]
lea edx, [ebp - 0x108]
call fcn.00404dd0
push dword [ebp - 0x938]
lea eax, [ebp - 0x930]
mov edx, 3
call fcn.00404eec
mov edx, dword [ebp - 0x930]
lea eax, [ebp - 0x208]
mov ecx, 0xff
call fcn.00404e08
mov byte [ebp - 0x108], 0
jmp 0x46b6d9
mov edx, 0x46b828
lea eax, [ebp - 0x94c]
call fcn.00403068
lea edx, [ebp - 8]
lea eax, [ebp - 0x94c]
mov cl, 8
call fcn.00403038
lea edx, [ebp - 0x94c]
lea eax, [ebp - 0x940]
call fcn.00404dd0
mov edx, dword [ebp - 0x940]
lea ecx, [ebp - 0x93c]
mov eax, 0x46b7fc
call fcn.00469d40
mov edx, dword [ebp - 0x93c]
lea eax, [ebp - 0x208]
mov ecx, 0xff
call fcn.00404e08
cmp byte [ebp - 0x208], 0
jne 0x46b6d9
lea eax, [ebp - 0x208]
lea edx, [ebp - 0x108]
call fcn.00403068
mov byte [ebp - 0x108], 0
jmp 0x46b6d9
call sub.user32.dll_WaitMessage
call fcn.0046a17c
test al, al
jne 0x46b6d4
lea eax, [ebp - 0x950]
lea edx, [ebp - 0x208]
call fcn.00404dd0
mov edx, dword [ebp - 0x950]
lea eax, [ebp - 0x513]
call fcn.00409668
lea eax, [ebp - 0x954]
lea edx, [ebp - 0x108]
call fcn.00404dd0
mov edx, dword [ebp - 0x954]
lea eax, [ebp - 0x413]
call fcn.00409668
lea eax, [ebp - 0x958]
lea edx, [ebp - 0x308]
call fcn.00404dd0
mov edx, dword [ebp - 0x958]
lea eax, [ebp - 0x613]
call fcn.00409668
push 1
lea eax, [ebp - 0x613]
push eax
lea eax, [ebp - 0x413]
push eax
lea eax, [ebp - 0x513]
push eax
push 0x46b830
mov eax, dword [0x482614]
mov eax, dword [eax]
push eax
call sub.shell32.dll_ShellExecuteA
jmp 0x46b778
call sub.user32.dll_WaitMessage
call fcn.0046a17c
test al, al
jne 0x46b773
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46b7be
lea eax, [ebp - 0x958]
mov edx, 3
call fcn.00404b98
lea eax, [ebp - 0x940]
mov edx, 0xb
call fcn.00404b98
lea eax, [ebp - 4]
call fcn.00404b74
ret