Function at 0x482278
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xe
push 0
push 0
dec ecx
jne 0x482280
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x48259e
push dword fs:[eax]
mov dword fs:[eax], esp
mov bl, 1
mov edx, 0x4825b4
mov eax, esi
call fcn.00481e68
test al, al
jne 0x4822b8
mov eax, dword [0x484dbc]
mov eax, dword [eax]
call fcn.00456630
xor edx, edx
mov eax, dword [esi + 0x2f8]
call fcn.0042e56c
mov eax, dword [esi + 0x2fc]
mov eax, dword [eax + 0x220]
mov edx, 0x4825e0
call fcn.0041b4a4
lea edx, [ebp - 8]
mov eax, dword [esi + 0x300]
call fcn.00468820
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x34]
cmp dword [ebp - 4], 0
je 0x4824c1
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x1c]
mov edx, 0x4825f8
call fcn.00404b24
jne 0x48244e
lea ecx, [ebp - 0x2c]
mov edx, 0x482608
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0xc]
call fcn.00412e84
lea ecx, [ebp - 0x3c]
mov edx, 0x482624
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x10]
call fcn.00412e84
lea eax, [ebp - 0x40]
mov ecx, 0x482644
mov edx, dword [ebp - 0x10]
call fcn.004044c4
mov edx, dword [ebp - 0x40]
mov eax, dword [esi + 0x2fc]
mov eax, dword [eax + 0x220]
call fcn.0041b4a4
push 0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.00482078
test al, al
je 0x4823f5
mov eax, dword [esi + 0x2fc]
mov eax, dword [eax + 0x220]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
lea ecx, [ebp - 0x44]
mov eax, dword [esi + 0x2fc]
mov eax, dword [eax + 0x220]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x44]
mov edx, 0x482660
call fcn.00404480
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [esi + 0x2fc]
mov eax, dword [eax + 0x220]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
mov eax, dword [esi + 0x2fc]
mov eax, dword [eax + 0x220]
pop ecx
mov edi, dword [eax]
call dword [edi + 0x20]
jmp 0x48244e
mov eax, dword [esi + 0x2fc]
mov eax, dword [eax + 0x220]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
lea ecx, [ebp - 0x48]
mov eax, dword [esi + 0x2fc]
mov eax, dword [eax + 0x220]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x48]
mov edx, 0x482670
call fcn.00404480
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [esi + 0x2fc]
mov ebx, dword [eax + 0x220]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
mov eax, ebx
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x20]
xor ebx, ebx
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x4c]
mov edx, 0x48267c
call fcn.00404b24
jne 0x48249e
lea eax, [ebp - 0x5c]
mov edx, dword [0x486f44]
call fcn.0041400c
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x6c]
mov edx, 0x4825f8
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x6c]
pop eax
call fcn.0041627c
lea edx, [ebp - 0x5c]
lea eax, [ebp - 0x14]
call fcn.00412e84
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 4]
call fcn.00405ef0
cmp dword [ebp - 4], 0
jne 0x482309
cmp dword [ebp - 0x14], 0
jne 0x4824da
lea eax, [ebp - 0x14]
mov ecx, 0x482694
mov edx, dword [0x486f44]
call fcn.004044c4
test bl, bl
je 0x4824fa
mov eax, dword [ebp - 0x14]
call fcn.00408f1c
test al, al
je 0x4824fa
push 1
mov eax, dword [ebp - 0x14]
call fcn.00404678
push eax
call sub.kernel32.dll_WinExec
test bl, bl
jne 0x482511
push 0x10
push 0x4826a4
push 0x4826b4
push 0
call sub.user32.dll_MessageBoxA_1
mov eax, dword [0x484dbc]
mov eax, dword [eax]
call fcn.00456630
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4825a5
lea eax, [ebp - 0x70]
call fcn.00405ed8
lea eax, [ebp - 0x6c]
mov edx, dword [0x4010b0]
mov ecx, 2
call fcn.00404e48
lea eax, [ebp - 0x4c]
call fcn.00404898
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.004041dc
lea eax, [ebp - 0x3c]
mov edx, dword [0x4010b0]
mov ecx, 2
call fcn.00404e48
lea eax, [ebp - 0x1c]
call fcn.00404898
lea eax, [ebp - 0x18]
call fcn.00405ed8
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.004041dc
lea eax, [ebp - 8]
mov edx, dword [0x460e90]
mov ecx, 2
call fcn.00404e48
ret