Function at 0x462ffc
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x463004
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x46369d
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 8]
mov eax, dword [ebx + 0x2fc]
call fcn.00437e00
mov eax, dword [ebp - 8]
mov edx, 0x4636b4
call fcn.00404e38
jne 0x463051
mov eax, dword [0x468eb4]
call fcn.0041a8ec
mov eax, ebx
call fcn.00453f14
jmp 0x463635
cmp byte [0x467a88], 0
je 0x463136
push 0x4636c8
lea edx, [ebp - 0x10]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
push dword [ebp - 0x10]
push dword [0x468ec0]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404dac
mov edx, dword [ebp - 0xc]
mov eax, dword [ebx + 0x328]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebx + 0x328]
mov eax, dword [eax + 0x10120]
mov edx, 0x4636f8
call fcn.00404e38
jne 0x46312a
mov edx, dword [0x468eb8]
mov eax, 0x463704
call fcn.00405030
mov esi, eax
test esi, esi
jle 0x4630de
mov eax, dword [0x468eb8]
call fcn.00404cec
mov ecx, eax
sub ecx, esi
inc ecx
mov eax, 0x468eb8
mov edx, esi
call fcn.00404f8c
push 5
push 0
push 0
lea edx, [ebp - 0x18]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x14]
mov edx, dword [0x468eb8]
call fcn.00404d38
mov eax, dword [ebp - 0x14]
call fcn.00404eec
push eax
push 0x463708
mov eax, dword [0x468eac]
call fcn.0043e5e8
push eax
call sub.shell32.dll_ShellExecuteA
mov eax, ebx
call fcn.00453f14
jmp 0x463136
mov eax, ebx
call fcn.00462fbc
jmp 0x463635
cmp byte [0x467a74], 0
jne 0x4631c7
mov dl, 1
mov eax, dword [ebx + 0x314]
call fcn.00437d20
mov edx, 0x463718
mov eax, dword [ebx + 0x310]
call fcn.00437e30
mov dl, 1
mov eax, dword [ebx + 0x308]
call fcn.00437d20
mov dl, 1
mov eax, dword [ebx + 0x30c]
call fcn.00437d20
mov edx, 0x463750
mov eax, dword [ebx + 0x34c]
call fcn.00437e30
xor edx, edx
mov eax, dword [ebx + 0x300]
call fcn.00437d20
xor edx, edx
mov eax, dword [ebx + 0x2f8]
call fcn.00437d20
mov edx, 0x4636b4
mov eax, dword [ebx + 0x2fc]
call fcn.00437e30
xor ecx, ecx
mov dl, 1
mov eax, dword [0x465524]
call fcn.0041a55c
mov dword [0x468eb4], eax
cmp byte [0x467a74], 1
jne 0x463304
mov dl, 1
mov eax, dword [ebx + 0x31c]
call fcn.00437d20
mov dl, 1
mov eax, dword [ebx + 0x320]
call fcn.00437d20
xor edx, edx
mov eax, dword [ebx + 0x314]
call fcn.00437d20
mov eax, dword [0x467a84]
mov edx, 0x46377c
call fcn.00404e38
jne 0x463252
xor edx, edx
mov eax, dword [ebx + 0x344]
call fcn.00437d20
xor edx, edx
mov eax, dword [ebx + 0x338]
call fcn.00437d20
xor edx, edx
mov eax, dword [ebx + 0x33c]
call fcn.00437d20
xor edx, edx
mov eax, dword [ebx + 0x340]
call fcn.00437d20
mov edx, 0x46378c
mov eax, dword [ebx + 0x310]
call fcn.00437e30
jmp 0x463296
mov dl, 1
mov eax, dword [ebx + 0x344]
call fcn.00437d20
mov dl, 1
mov eax, dword [ebx + 0x338]
call fcn.00437d20
mov dl, 1
mov eax, dword [ebx + 0x33c]
call fcn.00437d20
mov dl, 1
mov eax, dword [ebx + 0x340]
call fcn.00437d20
mov edx, 0x4637cc
mov eax, dword [ebx + 0x310]
call fcn.00437e30
xor edx, edx
mov eax, dword [ebx + 0x308]
call fcn.00437d20
xor edx, edx
mov eax, dword [ebx + 0x30c]
call fcn.00437d20
mov edx, 0x463808
mov eax, dword [ebx + 0x34c]
call fcn.00437e30
mov dl, 1
mov eax, dword [ebx + 0x318]
call fcn.00437d20
mov edx, 0x46382c
mov eax, dword [ebx + 0x30c]
call fcn.00437e30
mov dl, 1
mov eax, dword [ebx + 0x30c]
call fcn.00437d20
mov dl, 1
mov eax, dword [ebx + 0x32c]
call fcn.00437d20
mov dl, 1
mov eax, dword [ebx + 0x334]
call fcn.00437d20
cmp byte [0x467a74], 2
jne 0x46362f
mov eax, dword [0x467a84]
mov edx, 0x46377c
call fcn.00404e38
je 0x4633a7
push 5
push 0
push 0
push dword [0x468eb8]
lea edx, [ebp - 0x20]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
push dword [ebp - 0x20]
push 0x46384c
lea edx, [ebp - 0x24]
mov eax, dword [ebx + 0x340]
call fcn.00437e00
push dword [ebp - 0x24]
lea edx, [ebp - 0x28]
mov eax, dword [ebx + 0x338]
call fcn.00437e00
push dword [ebp - 0x28]
push 0x46385c
push dword [0x467a8c]
lea eax, [ebp - 0x1c]
mov edx, 7
call fcn.00404dac
mov eax, dword [ebp - 0x1c]
call fcn.00404eec
push eax
push 0x463708
mov eax, dword [0x468eac]
call fcn.0043e5e8
push eax
call sub.shell32.dll_ShellExecuteA
mov eax, ebx
call fcn.00453f14
mov eax, dword [ebx + 0x31c]
mov edx, dword [eax]
call dword [edx + 0xcc]
imul eax, eax, 0x305
mov edx, dword [0x468ebc]
cmp byte [edx + eax], 1
jne 0x4633f8
cmp byte [0x467a78], 0
jne 0x463504
lea edx, [ebp - 0x2c]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
cmp dword [ebp - 0x2c], 0
jne 0x463504
mov eax, ebx
call fcn.00462fbc
jmp 0x463635
mov eax, dword [ebx + 0x31c]
mov edx, dword [eax]
call dword [edx + 0xcc]
imul eax, eax, 0x305
mov edx, dword [0x468ebc]
cmp byte [edx + eax], 2
jne 0x46346f
cmp byte [0x467a78], 0
jne 0x46343e
lea edx, [ebp - 0x30]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
mov eax, dword [ebp - 0x30]
mov edx, 0x46386c
call fcn.00404e38
jne 0x463463
cmp byte [0x467a78], 1
jne 0x463504
lea edx, [ebp - 0x34]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
cmp dword [ebp - 0x34], 0
jne 0x463504
mov eax, ebx
call fcn.00462fbc
jmp 0x463635
mov eax, dword [ebx + 0x31c]
mov edx, dword [eax]
call dword [edx + 0xcc]
imul eax, eax, 0x305
mov edx, dword [0x468ebc]
cmp byte [edx + eax], 3
jne 0x463504
cmp byte [0x467a78], 0
jne 0x4634b5
lea edx, [ebp - 0x38]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
mov eax, dword [ebp - 0x38]
mov edx, 0x46386c
call fcn.00404e38
jne 0x4634f8
cmp byte [0x467a78], 1
jne 0x4634db
lea edx, [ebp - 0x3c]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
mov eax, dword [ebp - 0x3c]
mov edx, 0x463880
call fcn.00404e38
jne 0x4634f8
cmp byte [0x467a78], 2
jne 0x463504
lea edx, [ebp - 0x40]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
cmp dword [ebp - 0x40], 0
jne 0x463504
mov eax, ebx
call fcn.00462fbc
jmp 0x463635
inc byte [0x467a78]
mov eax, dword [ebx + 0x31c]
mov edx, dword [eax]
call dword [edx + 0xcc]
imul eax, eax, 0x305
mov edx, dword [0x468ebc]
mov al, byte [edx + eax]
cmp al, byte [0x467a78]
jne 0x4635b5
mov edx, dword [0x468eb8]
mov eax, 0x463704
call fcn.00405030
mov esi, eax
test esi, esi
jle 0x4635ae
mov eax, dword [0x468eb8]
call fcn.00404cec
mov ecx, eax
sub ecx, esi
inc ecx
mov eax, 0x468eb8
mov edx, esi
call fcn.00404f8c
push 5
push 0
push 0
lea edx, [ebp - 0x48]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x44]
mov edx, dword [0x468eb8]
call fcn.00404d38
mov eax, dword [ebp - 0x44]
call fcn.00404eec
push eax
push 0x463708
mov eax, dword [0x468eac]
call fcn.0043e5e8
push eax
call sub.shell32.dll_ShellExecuteA
mov eax, ebx
call fcn.00453f14
mov eax, ebx
call fcn.00453f14
push dword [0x467a80]
lea edx, [ebp - 0x4c]
mov eax, dword [ebx + 0x320]
call fcn.00437e00
push dword [ebp - 0x4c]
push dword [0x468ec0]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00404dac
xor edx, edx
mov eax, dword [ebx + 0x320]
call fcn.00437e30
mov eax, dword [ebx + 0x31c]
mov edx, dword [eax]
call dword [edx + 0xcc]
mov edx, eax
mov eax, ebx
call fcn.00462b9c
push 0x40
push 0x46388c
push 0x463898
mov eax, dword [0x468eac]
call fcn.0043e5e8
push eax
call sub.user32.dll_MessageBoxA_1
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x328]
mov ecx, dword [eax]
call dword [ecx + 0x58]
jmp 0x463635
inc byte [0x467a74]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4636a4
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.00404a50
lea eax, [ebp - 0x44]
call fcn.00404a2c
lea eax, [ebp - 0x40]
mov edx, 9
call fcn.00404a50
lea eax, [ebp - 0x1c]
call fcn.00404a2c
lea eax, [ebp - 0x18]
call fcn.00404a2c
lea eax, [ebp - 0x14]
call fcn.00404a2c
lea eax, [ebp - 0x10]
call fcn.00404a2c
lea eax, [ebp - 0xc]
call fcn.00404a2c
lea eax, [ebp - 8]
call fcn.00404a2c
lea eax, [ebp - 4]
call fcn.00404a2c
ret