Function at 0x4789b0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x258
mov eax, dword [0x52382c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x526728]
mov edx, dword [0x6a5c34]
push esi
mov esi, dword [0x6a5c30]
lea ecx, [esi + 0x8a]
cmp eax, ecx
mov ecx, dword [0x526800]
push edi
jl 0x478a37
lea edi, [esi + 0xaa]
cmp eax, edi
jg 0x478a37
lea edi, [edx + 0x103]
cmp ecx, edi
jl 0x478a37
lea edi, [edx + 0x10e]
cmp ecx, edi
jg 0x478a37
push 0x35
call fcn.00470960
mov ecx, dword [0x5e90d8]
add esp, 4
test ecx, ecx
je 0x47953b
push 0
push 1
push 0
call fcn.00488d70
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
lea edi, [esi + 8]
cmp eax, edi
jl 0x478a86
lea edi, [esi + 0x38]
cmp eax, edi
jg 0x478a86
lea edi, [edx + 0x17]
cmp ecx, edi
jl 0x478a86
lea edi, [edx + 0x22]
cmp ecx, edi
jg 0x478a86
mov ecx, dword [0x5e90d8]
mov dword [0x1a3c140], 0
test ecx, ecx
je 0x47953b
push 0
push 1
push 0
call fcn.00488d70
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
lea edi, [esi + 0x42]
push ebx
cmp eax, edi
jl 0x478ab2
lea ebx, [esi + 0x72]
cmp eax, ebx
jg 0x478ab2
lea ebx, [edx + 0x17]
cmp ecx, ebx
jl 0x478ab2
lea ebx, [edx + 0x22]
cmp ecx, ebx
jg 0x478ab2
mov dword [0x1a3c140], 1
jmp 0x479525
lea ebx, [esi + 0x7c]
cmp eax, ebx
jl 0x478b88
lea ebx, [esi + 0xac]
cmp eax, ebx
jg 0x478b88
lea ebx, [edx + 0x17]
cmp ecx, ebx
jl 0x478b88
lea ebx, [edx + 0x22]
cmp ecx, ebx
jg 0x478b88
mov ecx, dword [0x5e90d8]
xor esi, esi
cmp ecx, esi
je 0x478af6
push esi
push 1
push esi
call fcn.00488d70
push 0x44
lea edx, [ebp - 0x248]
push esi
push edx
call fcn.004cce10
push 0x5e8e30
lea edx, [ebp - 0x204]
push 0x4e6d90
push edx
mov dword [ebp - 0x248], 0x44
mov dword [ebp - 0x244], esi
mov dword [ebp - 0x240], esi
mov dword [ebp - 0x23c], esi
mov dword [ebp - 0x21c], 1
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x214], esi
call fcn.004cce8a
add esp, 0x18
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x248]
push ecx
push esi
push esi
push 0x20
push esi
push esi
push esi
lea edx, [ebp - 0x204]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
lea ebx, [esi + 8]
cmp eax, ebx
jl 0x478bb3
lea ebx, [esi + 0x38]
cmp eax, ebx
jg 0x478bb3
lea ebx, [edx + 0x2a]
cmp ecx, ebx
jl 0x478bb3
lea ebx, [edx + 0x35]
cmp ecx, ebx
jg 0x478bb3
mov dword [0x1a3c140], 3
jmp 0x479525
cmp eax, edi
jl 0x478bdb
lea edi, [esi + 0x72]
cmp eax, edi
jg 0x478bdb
lea edi, [edx + 0x2a]
cmp ecx, edi
jl 0x478bdb
lea edi, [edx + 0x35]
cmp ecx, edi
jg 0x478bdb
mov dword [0x1a3c140], 4
jmp 0x479525
mov edi, dword [0x1a3c140]
test edi, edi
jne 0x478dff
lea edi, [esi + 0xd]
cmp eax, edi
jl 0x47953a
lea ebx, [esi + 0x35]
cmp eax, ebx
jg 0x478c3e
lea ebx, [edx + 0x48]
cmp ecx, ebx
jl 0x478c3e
lea ebx, [edx + 0x51]
cmp ecx, ebx
jg 0x478c3e
movzx eax, word [0x5f375c]
mov ecx, dword [0x56895c]
imul eax, eax, 0x108c
mov byte [0x6a5c19], 1
cmp byte [eax + ecx + 0x11], 0
je 0x478c2f
call fcn.0044a4a0
push 0x35
call fcn.00470960
add esp, 4
jmp 0x479525
cmp eax, edi
jl 0x47953a
lea ebx, [esi + 0x35]
cmp eax, ebx
jg 0x478cb3
lea ebx, [edx + 0x5a]
cmp ecx, ebx
jl 0x478cb3
lea ebx, [edx + 0x63]
cmp ecx, ebx
jg 0x478cb3
mov byte [0x6a5c19], 3
call dword [sym.imp.WINMM.dll_timeGetTime]
sub eax, dword [0x568960]
cmp eax, 0x1388
jle 0x478c8e
push 0x35
mov dword [0x526908], 0x53
call fcn.00470960
add esp, 4
jmp 0x479525
mov eax, dword [0x5ec24c]
add eax, dword [0x1a3ba10]
push 5
push eax
call fcn.0040d780
add esp, 8
push 0x35
call fcn.00470960
add esp, 4
jmp 0x479525
cmp eax, edi
jl 0x47953a
lea ebx, [esi + 0x35]
cmp eax, ebx
jg 0x478d26
lea ebx, [edx + 0x6d]
cmp ecx, ebx
jl 0x478d26
lea ebx, [edx + 0x76]
cmp ecx, ebx
jg 0x478d26
mov byte [0x6a5c19], 3
call dword [sym.imp.WINMM.dll_timeGetTime]
sub eax, dword [0x568960]
cmp eax, 0x1388
jle 0x478cf6
mov dword [0x526908], 0x53
jmp 0x478d0d
mov edx, dword [0x5ec24c]
add edx, dword [0x1a3ba10]
push 5
push edx
call fcn.0040d780
add esp, 8
push 0x35
call fcn.00470960
add esp, 4
mov dword [0x5f4844], 0
jmp 0x479525
cmp eax, edi
jl 0x47953a
add esi, 0x35
cmp eax, esi
jg 0x47953a
lea eax, [edx + 0x80]
cmp ecx, eax
jl 0x47953a
add edx, 0x89
cmp ecx, edx
jg 0x47953a
mov esi, 0x63
mov byte [0x6a5c19], 4
cmp dword [0x5256bc], esi
je 0x478ca4
call dword [sym.imp.WINMM.dll_timeGetTime]
sub eax, dword [0x568960]
cmp eax, 0x1388
jle 0x478deb
cmp dword [0x526908], 0x50
jne 0x478dc7
cmp byte [0x6a58b8], 0
je 0x478d97
call fcn.00449db0
cmp byte [0x6a5a18], 0
je 0x478daa
push 0
call fcn.004498f0
add esp, 4
cmp byte [0x6a5a58], 0
je 0x478dbd
push 0
call fcn.00449d50
add esp, 4
call fcn.004509f0
call fcn.0046fc50
call fcn.0047b5c0
push 0x35
mov dword [0x5256bc], esi
mov dword [0x526908], 0x5a
call fcn.00470960
add esp, 4
jmp 0x479525
mov edx, dword [0x5ec24c]
add edx, dword [0x1a3ba10]
push 5
push edx
jmp 0x478c9c
cmp edi, 1
jne 0x478f4c
lea edi, [esi + 0x6f]
cmp eax, edi
jl 0x478e33
lea edi, [esi + 0x7b]
cmp eax, edi
jg 0x478e33
lea edi, [edx + 0x48]
cmp ecx, edi
jl 0x478e33
lea edi, [edx + 0x52]
cmp ecx, edi
jg 0x478e33
mov dword [0x5f3d5c], 1
jmp 0x478f21
lea edi, [esi + 0x91]
cmp eax, edi
jl 0x478e64
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x478e64
lea ebx, [edx + 0x48]
cmp ecx, ebx
jl 0x478e64
lea ebx, [edx + 0x52]
cmp ecx, ebx
jg 0x478e64
mov dword [0x5f3d5c], 0
jmp 0x478f21
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x478e8f
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x478e8f
lea ebx, [edx + 0x5b]
cmp ecx, ebx
jl 0x478e8f
lea ebx, [edx + 0x65]
cmp ecx, ebx
jg 0x478e8f
mov dword [0x6a5db4], 1
jmp 0x478f21
cmp eax, edi
jl 0x478eb7
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x478eb7
lea ebx, [edx + 0x5b]
cmp ecx, ebx
jl 0x478eb7
lea ebx, [edx + 0x65]
cmp ecx, ebx
jg 0x478eb7
mov dword [0x6a5db4], 0
jmp 0x478f21
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x478ee5
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x478ee5
lea ebx, [edx + 0x80]
cmp ecx, ebx
jl 0x478ee5
lea ebx, [edx + 0x8a]
cmp ecx, ebx
jg 0x478ee5
mov dword [0x6a437c], 1
jmp 0x478f21
cmp eax, edi
jl 0x47953a
add esi, 0x9d
cmp eax, esi
jg 0x47953a
lea eax, [edx + 0x80]
cmp ecx, eax
jl 0x47953a
add edx, 0x8a
cmp ecx, edx
jg 0x47953a
mov dword [0x6a437c], 0
mov ecx, dword [0x5e90d8]
test ecx, ecx
je 0x478f36
push 0
push 1
push 0
call fcn.00488d70
call fcn.0044af00
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
cmp edi, 3
jne 0x4792af
lea edi, [esi + 0x6f]
cmp eax, edi
jl 0x478fae
lea edi, [esi + 0x7b]
cmp eax, edi
jg 0x478fae
lea edi, [edx + 0x48]
cmp ecx, edi
jl 0x478fae
lea edi, [edx + 0x52]
cmp ecx, edi
jg 0x478fae
mov ecx, dword [0x5e90d8]
test ecx, ecx
je 0x478f86
push 0
push 1
push 0
call fcn.00488d70
cmp dword [0x526b70], 0
jne 0x47953a
push 1
call fcn.0046fa50
add esp, 4
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
lea edi, [esi + 0x91]
cmp eax, edi
jl 0x47900d
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x47900d
lea ebx, [edx + 0x48]
cmp ecx, ebx
jl 0x47900d
lea ebx, [edx + 0x52]
cmp ecx, ebx
jg 0x47900d
mov ecx, dword [0x5e90d8]
test ecx, ecx
je 0x478fe5
push 0
push 1
push 0
call fcn.00488d70
cmp dword [0x526b70], 0
je 0x47953a
push 0
call fcn.0046fa50
add esp, 4
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x479038
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x479038
lea ebx, [edx + 0x5b]
cmp ecx, ebx
jl 0x479038
lea ebx, [edx + 0x65]
cmp ecx, ebx
jg 0x479038
mov dword [0x5ea8f4], 1
jmp 0x479270
cmp eax, edi
jl 0x47909c
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x47909c
lea ebx, [edx + 0x5b]
cmp ecx, ebx
jl 0x47909c
lea ebx, [edx + 0x65]
cmp ecx, ebx
jg 0x47909c
mov ecx, dword [0x5e90d8]
mov dword [0x5ea8f4], 0
test ecx, ecx
je 0x479073
push 0
push 1
push 0
call fcn.00488d70
mov eax, dword [0x41ec314]
mov ecx, dword [0x5ea8f4]
push eax
push ecx
mov ecx, dword [0x53b1ec]
call fcn.0048b890
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x4790c7
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x4790c7
lea ebx, [edx + 0x6e]
cmp ecx, ebx
jl 0x4790c7
lea ebx, [edx + 0x78]
cmp ecx, ebx
jg 0x4790c7
mov dword [0x6a3094], 1
jmp 0x479525
cmp eax, edi
jl 0x4790f2
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x4790f2
lea ebx, [edx + 0x6e]
cmp ecx, ebx
jl 0x4790f2
lea ebx, [edx + 0x78]
cmp ecx, ebx
jg 0x4790f2
mov dword [0x6a3094], 0
jmp 0x479525
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x47912d
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x47912d
lea ebx, [edx + 0x80]
cmp ecx, ebx
jl 0x47912d
lea ebx, [edx + 0x8a]
cmp ecx, ebx
jg 0x47912d
push 1
mov dword [0x5659cc], 1
call fcn.0040b010
add esp, 4
jmp 0x479525
cmp eax, edi
jl 0x479168
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x479168
lea ebx, [edx + 0x80]
cmp ecx, ebx
jl 0x479168
lea ebx, [edx + 0x8a]
cmp ecx, ebx
jg 0x479168
push 1
mov dword [0x5659cc], 0
call fcn.0040b010
add esp, 4
jmp 0x479525
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x479199
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x479199
lea ebx, [edx + 0x93]
cmp ecx, ebx
jl 0x479199
lea ebx, [edx + 0x9d]
cmp ecx, ebx
jg 0x479199
mov dword [0x1a82f74], 1
jmp 0x479525
cmp eax, edi
jl 0x4791ca
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x4791ca
lea ebx, [edx + 0x93]
cmp ecx, ebx
jl 0x4791ca
lea ebx, [edx + 0x9d]
cmp ecx, ebx
jg 0x4791ca
mov dword [0x1a82f74], 0
jmp 0x479525
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x479234
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x479234
lea ebx, [edx + 0xa6]
cmp ecx, ebx
jl 0x479234
lea ebx, [edx + 0xb0]
cmp ecx, ebx
jg 0x479234
mov ecx, dword [0x5e90d8]
mov dword [0x41ec314], 1
test ecx, ecx
je 0x47920b
push 0
push 1
push 0
call fcn.00488d70
mov edx, dword [0x41ec314]
mov eax, dword [0x5ea8f4]
mov ecx, dword [0x53b1ec]
push edx
push eax
call fcn.0048b890
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
cmp eax, edi
jl 0x47953a
add esi, 0x9d
cmp eax, esi
jg 0x47953a
lea eax, [edx + 0xa6]
cmp ecx, eax
jl 0x47953a
add edx, 0xb0
cmp ecx, edx
jg 0x47953a
mov dword [0x41ec314], 0
mov ecx, dword [0x5e90d8]
test ecx, ecx
je 0x479285
push 0
push 1
push 0
call fcn.00488d70
mov ecx, dword [0x41ec314]
mov edx, dword [0x5ea8f4]
push ecx
mov ecx, dword [0x53b1ec]
push edx
call fcn.0048b890
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
cmp edi, 4
jne 0x47953a
mov edi, dword [0x633d08]
lea ebx, [edi + esi + 0x17]
cmp eax, ebx
jl 0x4792e8
lea ebx, [edi + esi + 0x27]
cmp eax, ebx
jg 0x4792e8
lea ebx, [edx + 0x5b]
cmp ecx, ebx
jl 0x4792e8
lea ebx, [edx + 0x5f]
cmp ecx, ebx
jg 0x4792e8
mov dword [0x1a3c7fc], 1
jmp 0x47931c
mov edi, dword [0x53b200]
lea ebx, [edi + esi + 0x17]
cmp eax, ebx
jl 0x479344
lea ebx, [edi + esi + 0x27]
cmp eax, ebx
jg 0x479344
lea ebx, [edx + 0x81]
cmp ecx, ebx
jl 0x479344
lea ebx, [edx + 0x85]
cmp ecx, ebx
jg 0x479344
mov dword [0x6338cc], 1
pop ebx
sub ecx, edi
pop edi
mov dword [0x41ec334], eax
mov dword [0x63f0a4], ecx
mov dword [0x631e24], 0
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
lea edi, [esi + 0x6f]
cmp eax, edi
jl 0x4793a5
lea edi, [esi + 0x7b]
cmp eax, edi
jg 0x4793a5
lea edi, [edx + 0x48]
cmp ecx, edi
jl 0x4793a5
lea edi, [edx + 0x52]
cmp ecx, edi
jg 0x4793a5
mov ecx, dword [0x5e90d8]
mov dword [0x52688c], 1
test ecx, ecx
je 0x47937f
push 0
push 1
push 0
call fcn.00488d70
mov ecx, dword [0x6a42a8]
add ecx, dword [0x1a2e664]
push ecx
call fcn.0040cf70
add esp, 4
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
lea edi, [esi + 0x91]
cmp eax, edi
jl 0x4793e0
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x4793e0
lea ebx, [edx + 0x48]
cmp ecx, ebx
jl 0x4793e0
lea ebx, [edx + 0x52]
cmp ecx, ebx
jg 0x4793e0
push 0xffffffffffffffff
call fcn.0040cf70
add esp, 4
mov dword [0x52688c], 0
jmp 0x479525
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x479426
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x479426
lea ebx, [edx + 0x6d]
cmp ecx, ebx
jl 0x479426
lea ebx, [edx + 0x77]
cmp ecx, ebx
jg 0x479426
mov ecx, dword [0x5e90d8]
mov dword [0x526824], 1
test ecx, ecx
je 0x47953a
push 0
call fcn.00488d60
mov ecx, dword [0x5e90d8]
jmp 0x47952f
cmp eax, edi
jl 0x47946c
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x47946c
lea ebx, [edx + 0x6d]
cmp ecx, ebx
jl 0x47946c
lea ebx, [edx + 0x77]
cmp ecx, ebx
jg 0x47946c
mov ecx, dword [0x5e90d8]
mov dword [0x526824], 0
test ecx, ecx
je 0x47953a
push 1
call fcn.00488d60
mov ecx, dword [0x5e90d8]
jmp 0x47952f
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x47949d
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x47949d
lea ebx, [edx + 0x93]
cmp ecx, ebx
jl 0x47949d
lea ebx, [edx + 0x9d]
cmp ecx, ebx
jg 0x47949d
mov dword [0x5f343c], 1
jmp 0x479525
cmp eax, edi
jl 0x4794cb
lea ebx, [esi + 0x9d]
cmp eax, ebx
jg 0x4794cb
lea ebx, [edx + 0x93]
cmp ecx, ebx
jl 0x4794cb
lea ebx, [edx + 0x9d]
cmp ecx, ebx
jg 0x4794cb
mov dword [0x5f343c], 0
jmp 0x479525
lea ebx, [esi + 0x6f]
cmp eax, ebx
jl 0x4794f9
lea ebx, [esi + 0x7b]
cmp eax, ebx
jg 0x4794f9
lea ebx, [edx + 0xa5]
cmp ecx, ebx
jl 0x4794f9
lea ebx, [edx + 0xaf]
cmp ecx, ebx
jg 0x4794f9
mov dword [0x6a36e0], 1
jmp 0x479525
cmp eax, edi
jl 0x47953a
add esi, 0x9d
cmp eax, esi
jg 0x47953a
lea eax, [edx + 0xa5]
cmp ecx, eax
jl 0x47953a
add edx, 0xaf
cmp ecx, edx
jg 0x47953a
mov dword [0x6a36e0], 0
mov ecx, dword [0x5e90d8]
test ecx, ecx
je 0x47953a
push 0
push 1
push 0
call fcn.00488d70
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.004ccd49
mov esp, ebp
pop ebp
ret