Function at 0x4020b4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa4
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x58], eax
mov eax, 0x47b414
call fcn.0045d34c
mov word [ebp - 0x44], 8
lea eax, [ebp - 4]
call fcn.00401cac
inc dword [ebp - 0x38]
mov word [ebp - 0x44], 0x14
mov edx, dword [ebp - 0x5c]
dec edx
je 0x402115
dec edx
jne 0x4021db
mov eax, dword [ebp - 0x58]
call fcn.00445a28
dec dword [ebp - 0x38]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004660e0
mov ecx, dword [ebp - 0x54]
mov dword fs:[0], ecx
jmp 0x4023f4
mov word [ebp - 0x44], 0x20
lea eax, [ebp - 0xc]
call fcn.00401cac
push eax
inc dword [ebp - 0x38]
mov edx, str.GBSETUP_
lea eax, [ebp - 8]
call fcn.0046606c
inc dword [ebp - 0x38]
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x58]
add eax, 0x2fc
pop ecx
call fcn.00466124
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x58]
add eax, 0x300
call fcn.00466110
dec dword [ebp - 0x38]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004660e0
dec dword [ebp - 0x38]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004660e0
mov word [ebp - 0x44], 0x2c
lea eax, [ebp - 0x14]
call fcn.00401cac
push eax
inc dword [ebp - 0x38]
mov edx, str.Setup.exe
lea eax, [ebp - 0x10]
call fcn.0046606c
inc dword [ebp - 0x38]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x58]
add eax, 0x300
pop ecx
call fcn.00466124
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x58]
add eax, 0x304
call fcn.00466110
dec dword [ebp - 0x38]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004660e0
dec dword [ebp - 0x38]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004660e0
mov word [ebp - 0x44], 0x38
mov eax, dword [ebp - 0x58]
add eax, 0x300
call fcn.004023f8
mov edx, eax
lea eax, [ebp - 0x18]
call fcn.0046606c
inc dword [ebp - 0x38]
mov eax, dword [eax]
call fcn.00414fa4
push eax
dec dword [ebp - 0x38]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004660e0
pop ecx
test cl, cl
je 0x40231a
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x304]
call fcn.00414dac
test al, al
je 0x402263
push 1
push 0
lea eax, [ebp - 4]
call fcn.004023f8
push eax
mov eax, dword [ebp - 0x58]
add eax, 0x304
call fcn.004023f8
push eax
push 0x47b1df
mov eax, dword [sym.Start.exe__AutoForm]
call fcn.004572fc
push eax
call sub.SHELL32.DLL_ShellExecuteA
jmp 0x4023cc
mov word [ebp - 0x44], 0x44
lea eax, [ebp - 0x1c]
call fcn.00401cac
mov ecx, eax
inc dword [ebp - 0x38]
mov edx, dword [ebp - 0x58]
add edx, 0x304
mov eax, 0x47b1e4
call fcn.004661f4
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x24]
call fcn.00401cac
push eax
inc dword [ebp - 0x38]
mov edx, 0x47b1ec
lea eax, [ebp - 0x20]
call fcn.0046606c
inc dword [ebp - 0x38]
lea edx, [ebp - 0x20]
pop ecx
pop eax
call fcn.00466124
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x58]
add eax, 0x304
call fcn.00466110
dec dword [ebp - 0x38]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004660e0
dec dword [ebp - 0x38]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004660e0
dec dword [ebp - 0x38]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004660e0
push 0
mov eax, dword [ebp - 0x58]
add eax, 0x304
call fcn.004023f8
mov edx, eax
mov ecx, 0x47b1f8
mov eax, dword [0x480938]
mov eax, dword [eax]
call fcn.00465fd8
jmp 0x4023cc
mov word [ebp - 0x44], 0x50
lea eax, [ebp - 0x28]
call fcn.00401cac
mov ecx, eax
inc dword [ebp - 0x38]
mov edx, dword [ebp - 0x58]
add edx, 0x300
mov eax, 0x47b209
call fcn.004661f4
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x30]
call fcn.00401cac
push eax
inc dword [ebp - 0x38]
mov edx, 0x47b213
lea eax, [ebp - 0x2c]
call fcn.0046606c
inc dword [ebp - 0x38]
lea edx, [ebp - 0x2c]
pop ecx
pop eax
call fcn.00466124
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x58]
add eax, 0x300
call fcn.00466110
dec dword [ebp - 0x38]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.004660e0
dec dword [ebp - 0x38]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.004660e0
dec dword [ebp - 0x38]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.004660e0
push 0
mov eax, dword [ebp - 0x58]
add eax, 0x300
call fcn.004023f8
mov edx, eax
mov ecx, 0x47b21f
mov eax, dword [0x480938]
mov eax, dword [eax]
call fcn.00465fd8
mov edx, dword [ebp - 0x58]
mov eax, dword [edx + 0x2fc]
call fcn.00414fa4
dec dword [ebp - 0x38]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004660e0
mov ecx, dword [ebp - 0x54]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret