Function at 0x404cf0
Capabilities:
Create process on windows
Set current directory

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x19594
call fcn.00428fb0
mov eax, dword [0x436064]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [0x4387b4]
xor ebx, ebx
mov byte [ebp - 0x110], 0
mov byte [ebp - 0x19530], 0
mov byte [ebp - 0x19531], 0
test edi, edi
jle 0x40506e
cmp byte [ebp - 0x19531], 0
jne 0x404d9f
mov esi, dword [0x4387b8]
mov eax, dword [esi + ebx*4]
mov ecx, str._START
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x404d66
test dl, dl
je 0x404d62
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x404d66
add eax, 2
add ecx, 2
test dl, dl
jne 0x404d46
xor eax, eax
jmp 0x404d6b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x404e58
inc ebx
mov byte [ebp - 0x19531], 1
cmp ebx, edi
jge 0x404e58
mov eax, dword [esi + ebx*4]
lea edx, [ebp - 0x110]
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x404d90
jmp 0x404e58
lea eax, [ebp - 0x19530]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x404da8
sub eax, edx
mov esi, eax
mov eax, dword [0x4387b8]
mov edx, dword [eax + ebx*4]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x404dc0
sub eax, edi
lea ecx, [esi + eax + 2]
cmp ecx, 0x19000
jae 0x404e61
lea edi, [ebp - 0x19530]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x404de0
mov ax, word [0x4337ec]
mov word [edi], ax
mov eax, edx
mov ecx, edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x404df5
lea edi, [ebp - 0x19530]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x404e07
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x19530]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x404e24
mov cx, word [0x4337ec]
mov word [edi], cx
lea edi, [ebp - 0x19530]
dec edi
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x404e40
mov dx, word [0x433d28]
mov word [edi], dx
mov edi, dword [0x4387b4]
inc ebx
cmp ebx, edi
jl 0x404d2f
cmp byte [ebp - 0x19531], 0
je 0x40506e
mov esi, 0x4386d0
mov eax, dword [esi]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0041e620
add esp, 8
test eax, eax
jne 0x40506e
add esi, 4
cmp esi, 0x438768
jl 0x404e73
push eax
push eax
lea ecx, [ebp - 0x320]
push ecx
lea edx, [ebp - 0x530]
push edx
lea eax, [ebp - 0x110]
push eax
call fcn.0041f103
lea ecx, [ebp - 0x320]
push ecx
lea edx, [ebp - 0x530]
push edx
lea eax, [ebp - 0x428]
push str._s_s
push eax
call fcn.0041d6a1
add esp, 0x24
lea ecx, [ebp - 0x428]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push str.TEMP
call fcn.0041da13
add esp, 4
push 0x104
lea edx, [ebp - 0x218]
push edx
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x110]
lea eax, [ebp - 0x218]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x404f32
test dl, dl
je 0x404f2e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x404f32
add eax, 2
add ecx, 2
test dl, dl
jne 0x404f12
xor eax, eax
jmp 0x404f37
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x404fc4
cmp byte [0x439568], 0
jne 0x404f54
call fcn.00401040
mov byte [0x439568], 1
mov eax, dword [0x439598]
mov eax, dword [eax + 0xac]
push eax
lea ecx, [ebp - 0x110]
push ecx
call fcn.0041e620
add esp, 8
test eax, eax
jne 0x404fc4
lea edx, [ebp - 0x110]
push esi
push edx
call fcn.0041e620
add esp, 8
test eax, eax
jne 0x404fc4
cmp byte [0x439568], al
jne 0x404f9b
call fcn.00401040
mov byte [0x439568], 1
mov edx, dword [0x439598]
lea eax, [ebp - 0x110]
push eax
mov eax, dword [edx + 0xa8]
lea ecx, [ebp - 0x218]
push ecx
push eax
lea eax, [ebp - 0x110]
call fcn.00402860
add esp, 0xc
lea eax, [ebp - 0x110]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x404fd0
sub eax, edx
mov edx, eax
lea eax, [ebp - 0x19530]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x404fe4
sub eax, esi
lea ecx, [edx + eax + 8]
push ecx
call fcn.0041ceb7
mov esi, eax
lea edx, [ebp - 0x19530]
push edx
lea eax, [ebp - 0x110]
push eax
push str.__s___s
push esi
call fcn.0041d6a1
push 0x44
lea ecx, [ebp - 0x19590]
push 0
push ecx
call fcn.00423a10
add esp, 0x20
xor eax, eax
lea edx, [ebp - 0x19544]
push edx
mov dword [ebp - 0x19544], eax
mov dword [ebp - 0x19540], eax
mov dword [ebp - 0x1953c], eax
mov dword [ebp - 0x19538], eax
lea eax, [ebp - 0x19590]
push eax
push 0
push 0
push 0x100
push 0
push 0
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push esi
call fcn.0041d848
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041cec2
mov esp, ebp
pop ebp
ret