Function at 0x463c80
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c1da1
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push esi
push edi
lea edi, [ebp - 0x40]
mov ecx, 0xd
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x51197c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 1
mov esi, esp
lea ecx, [ebp + 0xc]
call dword [sym.imp.MFC80U.DLL_Ordinal_3927]
cmp esi, esp
call fcn.004b81e1
movzx eax, al
test eax, eax
je 0x463d04
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 4], 0xffffffff
mov esi, esp
lea ecx, [ebp + 0xc]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
cmp esi, esp
call fcn.004b81e1
mov eax, dword [ebp - 0x30]
jmp 0x463eb3
mov esi, esp
lea ecx, [ebp + 0xc]
call dword [sym.imp.MFC80U.DLL_Ordinal_870]
cmp esi, esp
call fcn.004b81e1
mov esi, esp
push eax
call dword [sym.imp.SHLWAPI.dll_PathGetArgsW]
cmp esi, esp
call fcn.004b81e1
mov esi, esp
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
cmp esi, esp
call fcn.004b81e1
mov byte [ebp - 4], 1
mov esi, esp
push 0x4ce5b8
lea ecx, [ebp - 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
cmp esi, esp
call fcn.004b81e1
mov byte [ebp - 4], 2
mov esi, esp
lea ecx, [ebp + 0xc]
call dword [sym.imp.MFC80U.DLL_Ordinal_2895]
cmp esi, esp
call fcn.004b81e1
mov esi, eax
mov edi, esp
lea ecx, [ebp - 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_2895]
cmp edi, esp
call fcn.004b81e1
sub esi, eax
mov dword [ebp - 0x2c], esi
mov esi, esp
mov edx, dword [ebp - 0x2c]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0xc]
call dword [sym.imp.MFC80U.DLL_Ordinal_3990]
cmp esi, esp
call fcn.004b81e1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x40], ecx
mov byte [ebp - 4], 3
mov esi, esp
mov edx, dword [ebp - 0x40]
push edx
lea ecx, [ebp - 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_774]
cmp esi, esp
call fcn.004b81e1
mov byte [ebp - 4], 2
mov esi, esp
lea ecx, [ebp - 0x34]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
cmp esi, esp
call fcn.004b81e1
mov esi, esp
lea ecx, [ebp - 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_6173]
cmp esi, esp
call fcn.004b81e1
mov esi, esp
lea ecx, [ebp - 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_6167]
cmp esi, esp
call fcn.004b81e1
mov esi, esp
push 1
push 0
mov edi, esp
lea ecx, [ebp - 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_870]
cmp edi, esp
call fcn.004b81e1
push eax
mov edi, esp
lea ecx, [ebp - 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_870]
cmp edi, esp
call fcn.004b81e1
push eax
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp esi, esp
call fcn.004b81e1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x20
jbe 0x463e65
mov dword [ebp - 0x10], 0
cmp dword [ebp + 0x10], 0
je 0x463e65
mov esi, esp
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.004b81e1
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x38], edx
mov byte [ebp - 4], 1
mov esi, esp
lea ecx, [ebp - 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
cmp esi, esp
call fcn.004b81e1
mov byte [ebp - 4], 0
mov esi, esp
lea ecx, [ebp - 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
cmp esi, esp
call fcn.004b81e1
mov dword [ebp - 4], 0xffffffff
mov esi, esp
lea ecx, [ebp + 0xc]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
cmp esi, esp
call fcn.004b81e1
mov eax, dword [ebp - 0x38]
push edx
mov ecx, ebp
push eax
lea edx, [0x463ee0]
call fcn.004b8204
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x40
cmp ebp, esp
call fcn.004b81e1
mov esp, ebp
pop ebp
ret