Function at 0x4637f2
Capabilities:
Create process on windows

Disassembly:
push 0x10
push 0x388
mov eax, 0x4b02ce
call fcn.004a7770
mov dword [ebp - 0x288], edx
mov esi, ecx
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebx + 0x1c]
push 0x208
mov dword [ebp - 0x290], eax
lea eax, [ebp - 0x220]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov dword [ebp - 0x280], 0x9311b03a
mov edi, 0xa164aed8
mov dword [ebp - 0x27c], 0x33b8ece
mov edx, 0xdb1bc560
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], ecx
mov dword [ebp - 0x280], 0x935707b0
mov dword [ebp - 0x27c], 0xe420d216
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x254], ecx
mov dword [ebp - 0x280], 0x592f18be
mov dword [ebp - 0x27c], 0xa0205830
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x280], edi
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x280], 0x937fb051
mov dword [ebp - 0x27c], 0x34c8eab
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x280], 0x933e07c6
mov dword [ebp - 0x27c], 0xe40ed266
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x23c], ecx
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x280], 0x595718db
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x27c], 0xa0205855
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x234], ecx
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x280], edi
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x22c], ecx
mov ecx, dword [ebp - 0x27c]
movaps xmm1, xmmword [ebp - 0x260]
pxor xmm1, xmmword [ebp - 0x240]
mov dword [ebp - 0x228], eax
lea eax, [ebp - 0x260]
movaps xmmword [ebp - 0x260], xmm1
movaps xmm1, xmmword [ebp - 0x250]
push eax
mov dword [ebp - 0x224], ecx
lea eax, [ebp - 0x220]
pxor xmm1, xmmword [ebp - 0x230]
push eax
movaps xmmword [ebp - 0x250], xmm1
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x44
push 0
lea eax, [ebp - 0x2e8]
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [ebp - 0x2e8], 0x44
lea edi, [ebp - 0x2a0]
mov dword [ebp - 0x2bc], 1
stosd dword es:[edi], eax
lea ecx, [ebp - 0x398]
push 0xa
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop eax
add esp, 8
mov word [ebp - 0x2b8], ax
call fcn.0046f43e
xor edi, edi
lea edx, [ebp - 0x220]
test esi, esi
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x388]
cmovne edx, esi
call fcn.0043ea8e
mov esi, 0x4c2944
mov ecx, eax
mov edx, esi
call fcn.0043ea8e
mov edx, str._open_opction
lea ecx, [ebp - 0x388]
call fcn.0043ea8e
push dword [ebp - 0x288]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int_]
mov edx, esi
lea ecx, [ebp - 0x388]
call fcn.0043ea8e
mov edx, str._from
mov ecx, eax
call fcn.0043ea8e
mov ecx, dword [ebp - 0x28c]
push dword [ecx]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int_]
mov esi, dword [ebp - 0x290]
test esi, esi
je 0x463ad5
mov edx, 0x4c2944
lea ecx, [ebp - 0x388]
call fcn.0043ea8e
mov edx, 0x4c5ea4
mov ecx, eax
call fcn.0043ea8e
mov edx, esi
mov ecx, eax
call fcn.0043ea8e
cmp byte [ebx + 0x2c], 0
mov esi, 0x4c2944
je 0x463b06
mov edx, esi
lea ecx, [ebp - 0x388]
call fcn.0043ea8e
mov edx, str._top_most
mov ecx, eax
call fcn.0043ea8e
movzx ecx, byte [ebx + 0x2c]
push ecx
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int_]
mov edx, esi
lea ecx, [ebp - 0x388]
call fcn.0043ea8e
mov edx, str._subpid
mov ecx, eax
call fcn.0043ea8e
push 0xf
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int_]
cmp dword [ebx + 0x34], edi
jle 0x463b52
mov edx, esi
lea ecx, [ebp - 0x388]
call fcn.0043ea8e
mov edx, str._fid
mov ecx, eax
call fcn.0043ea8e
push dword [ebx + 0x34]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int_]
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x380]
call fcn.0043e71b
cmp dword [ebp - 0x264], 8
lea ecx, [ebp - 0x2a0]
push ecx
lea ecx, [ebp - 0x2e8]
push ecx
push edi
push edi
push edi
push edi
push edi
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
push edi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
lea ecx, [ebp - 0x278]
setne byte [ebp - 0x281]
call fcn.0040dc21
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x29c], edi
je 0x463bc4
push dword [ebp - 0x29c]
call esi
mov dword [ebp - 0x29c], edi
cmp dword [ebp - 0x2a0], edi
je 0x463bda
push dword [ebp - 0x2a0]
call esi
mov dword [ebp - 0x2a0], edi
lea ecx, [ebp - 0x330]
call fcn.0046f40e
lea ecx, [ebp - 0x330]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void_]
mov al, byte [ebp - 0x281]
mov ecx, dword [ebp - 0x14]
call fcn.004a774e
ret