Function at 0x41a090
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2260
call fcn.0040a530
mov eax, dword [0x539a68]
xor eax, ebp
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x21b0], 0
push 0x2183
push 0
lea eax, [ebp - 0x21af]
push eax
call fcn.004057a0
add esp, 0xc
mov dword [ebp - 8], 0
mov dword [ebp - 0x21b8], 0
mov dword [ebp - 0x21bc], 0
lea ecx, [ebp - 0x21b0]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x21b4], 0
mov dword [ebp - 4], 0
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x1c], 0xffffffff
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x18], 0xffffffff
mov ecx, dword [ebp + 8]
push ecx
push 0x53e034
lea edx, [ebp - 0x21b0]
push edx
call fcn.00443408
add esp, 0xc
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 1
jmp 0x41a144
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp + 0x18]
jge 0x41a206
push 0x53e038
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + edx*4]
push ecx
call fcn.004046b0
add esp, 8
test eax, eax
je 0x41a186
push 0x53e03c
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + edx*4]
push ecx
call fcn.004046b0
add esp, 8
test eax, eax
jne 0x41a1b0
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + edx*4]
push ecx
push 0x53e040
mov edx, dword [ebp - 0x10]
push edx
call fcn.00443408
add esp, 0xc
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
jmp 0x41a201
cmp dword [ebp - 4], 1
jne 0x41a1e0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + eax*4]
push edx
push 0x53e044
mov eax, dword [ebp - 0x10]
push eax
call fcn.00443408
add esp, 0xc
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
jmp 0x41a201
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + ecx*4]
push eax
push 0x53e04c
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00443408
add esp, 0xc
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
jmp 0x41a13b
cmp dword [0x558a9c], 0
je 0x41a24c
push str.__l__
lea edx, [ebp - 0x21b0]
push edx
call fcn.00443320
add esp, 8
mov eax, dword [0x558a9c]
push eax
lea ecx, [ebp - 0x21b0]
push ecx
call fcn.00443320
add esp, 8
push 0x53e058
lea edx, [ebp - 0x21b0]
push edx
call fcn.00443320
add esp, 8
call fcn.004605a0
cmp eax, 2
jne 0x41a334
lea eax, [ebp - 0x2208]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
lea ecx, [ebp - 0x21bc]
push ecx
lea edx, [ebp - 0x21b0]
push edx
call fcn.00460660
add esp, 8
mov dword [ebp - 0x21b8], eax
cmp dword [ebp - 0x21b8], 0
jne 0x41a293
xor eax, eax
jmp 0x41a426
cmp dword [0x558ab0], 1
jne 0x41a2a8
mov dword [ebp - 0x2254], 0
jmp 0x41a2dc
cmp dword [0x558a9c], 0
jne 0x41a2c6
cmp dword [0x558ab0], 2
jne 0x41a2c6
mov dword [ebp - 0x2258], 0x10
jmp 0x41a2d0
mov dword [ebp - 0x2258], 8
mov eax, dword [ebp - 0x2258]
mov dword [ebp - 0x2254], eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x2208]
push edx
push 0
push 0
mov eax, dword [ebp - 0x2254]
push eax
push 1
push 0
push 0
mov ecx, dword [ebp - 0x21b8]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 0x21b4], eax
cmp dword [ebp - 0x21b8], 0
je 0x41a32f
mov edx, dword [ebp - 0x21b8]
push edx
call fcn.00462990
add esp, 4
mov dword [ebp - 0x21b8], 0
jmp 0x41a3f7
lea eax, [ebp - 0x2250]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
lea ecx, [ebp - 0x21bc]
push ecx
lea edx, [ebp - 0x21b0]
push edx
call fcn.00460950
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x41a367
xor eax, eax
jmp 0x41a426
cmp dword [0x558ab0], 1
jne 0x41a37c
mov dword [ebp - 0x225c], 0
jmp 0x41a3b0
cmp dword [0x558a9c], 0
jne 0x41a39a
cmp dword [0x558ab0], 2
jne 0x41a39a
mov dword [ebp - 0x2260], 0x10
jmp 0x41a3a4
mov dword [ebp - 0x2260], 8
mov eax, dword [ebp - 0x2260]
mov dword [ebp - 0x225c], eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x2250]
push edx
push 0
push 0
mov eax, dword [ebp - 0x225c]
push eax
push 1
push 0
push 0
mov ecx, dword [ebp - 8]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x21b4], eax
cmp dword [ebp - 8], 0
je 0x41a3f7
mov edx, dword [ebp - 8]
push edx
call fcn.00462990
add esp, 4
mov dword [ebp - 8], 0
cmp dword [ebp - 0x21b4], 0
jne 0x41a404
xor eax, eax
jmp 0x41a426
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x1c], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [edx + 0x18], eax
mov ecx, dword [ebp + 0x14]
lea edx, [ebp - 0x21b0]
mov dword [ecx], edx
mov eax, 1
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.0040553d
mov esp, ebp
pop ebp
ret