Function at 0x479e60
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73cbab
mov eax, dword fs:[0]
push eax
sub esp, 0x2c0
mov eax, dword [0x8312b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x14]
mov esi, dword [ebp + 0x18]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x234], eax
call fcn.00461b90
test al, al
je 0x47a03d
mov edx, dword [ebp - 0x234]
test edx, edx
je 0x47a08f
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x234], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x479ed4
sub ecx, dword [ebp - 0x234]
sar ecx, 1
je 0x47a08f
xorps xmm0, xmm0
mov dword [ebp - 0x2c8], 0
xor eax, eax
movlpd qword [ebp - 0x2c0], xmm0
push edx
mov word [ebp - 0x28a], ax
lea eax, [ebp - 0x218]
push 0x104
push eax
movlpd qword [ebp - 0x2b8], xmm0
movlpd qword [ebp - 0x2b0], xmm0
movlpd qword [ebp - 0x2a8], xmm0
movlpd qword [ebp - 0x29a], xmm0
movlpd qword [ebp - 0x292], xmm0
movups xmmword [ebp - 0x288], xmm0
mov dword [ebp - 0x2cc], 0x44
call fcn.00715557
lea eax, [ebp - 0x218]
mov dword [ebp - 0x2a0], 0x81
mov dword [ebp - 0x2c4], eax
lea ecx, [ebp - 0x230]
add esp, 0xc
mov eax, 5
mov word [ebp - 0x29c], ax
mov eax, dword [ebp - 0x23c]
push eax
call fcn.0044c260
mov eax, dword [ebp - 0x238]
mov dword [ebp - 4], 0
test eax, eax
je 0x479ff7
mov ecx, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x479fa3
sub ecx, edx
sar ecx, 1
je 0x479ff7
push 1
push 0x7ecc64
lea ecx, [ebp - 0x230]
call fcn.00460700
mov edx, dword [ebp - 0x238]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x234], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x479fd7
sub ecx, dword [ebp - 0x234]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x230]
call fcn.00460700
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x288]
push ecx
lea ecx, [ebp - 0x2cc]
push ecx
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x47a05c
lea ecx, [ebp - 0x230]
call fcn.0044bf40
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006f4f1e
mov esp, ebp
pop ebp
ret 0x14
push dword [ebp - 0x284]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x47a074
mov eax, dword [ebp - 0x280]
mov dword [edi], eax
test esi, esi
je 0x47a080
mov eax, dword [ebp - 0x288]
mov dword [esi], eax
lea ecx, [ebp - 0x230]
call fcn.0044bf40
mov al, 1
jmp 0x47a03f
xorps xmm0, xmm0
mov dword [ebp - 0x278], 0x3c
movlpd qword [ebp - 0x274], xmm0
movlpd qword [ebp - 0x26c], xmm0
movlpd qword [ebp - 0x264], xmm0
movlpd qword [ebp - 0x25c], xmm0
movlpd qword [ebp - 0x254], xmm0
movlpd qword [ebp - 0x24c], xmm0
movlpd qword [ebp - 0x244], xmm0
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x278]
push eax
mov dword [ebp - 0x26c], 0x7ecc68
mov dword [ebp - 0x264], edx
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 5
mov dword [ebp - 0x274], 0x40
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x47a03d
cmp dword [ebp - 0x258], 0x20
jle 0x47a03d
test edi, edi
je 0x47a154
push dword [ebp - 0x240]
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [edi], eax
test esi, esi
je 0x47a160
mov eax, dword [ebp - 0x240]
mov dword [esi], eax
mov al, 1
jmp 0x47a03f