Function at 0x414e22
Capabilities:
Create process on windows

Disassembly:
enter 0x848, 2
push ebx
push ecx
push edx
mov dword [ebp - 4], eax
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x110]
call fcn.00401940
mov dword [ebp - 0xc], esp
lea edi, [ebp - 0x24c]
mov esi, 0x4cbc3f
push 0xa
call fcn.00401950
movzx eax, byte [ebp - 0x110]
movsx ebx, ax
test ebx, ebx
jle 0x414eab
mov word [ebp - 0x250], bx
mov word [ebp - 0x234], 0
inc word [ebp - 0x234]
movsx eax, word [ebp - 0x234]
mov dword [ebp - 0x254], eax
movsx ebx, word [ebp - 0x234]
mov al, byte [ebp + ebx - 0x110]
push eax
call fcn.00415a80
mov ecx, dword [ebp - 0x254]
mov byte [ebp + ecx - 0x110], al
dec word [ebp - 0x250]
jne 0x414e6d
lea edi, [ebp - 0x118]
mov esi, 0x4cbc40
push 4
call fcn.00401950
lea edi, [ebp - 0x228]
mov esi, 0x4cbc41
call fcn.00401940
push 0x4cbc42
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
ja 0x4151af
push 0x4cbc48
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
ja 0x4151af
push 0x4cbc4d
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
ja 0x4151af
push 0x4cbc52
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
ja 0x4151af
lea eax, [ebp - 0x128]
push eax
movzx ebx, byte [ebp - 0x110]
add ebx, 5
push ebx
call fcn.00403b50
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4cbc57
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x414fd7
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4cbc5c
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4cbc61
push 4
call fcn.00401950
jmp 0x415193
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4cbc65
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x415066
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4cbc6b
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4cbc71
push 4
call fcn.00401950
jmp 0x415193
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4cbc76
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x4150f5
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4cbc7b
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4cbc80
push 4
call fcn.00401950
jmp 0x415193
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4cbc84
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x415181
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4cbc89
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4cbc8e
push 4
call fcn.00401950
jmp 0x415193
lea edi, [ebp - 0x118]
mov esi, 0x4cbc92
push 4
call fcn.00401950
lea eax, [ebp - 0x128]
push eax
movzx ebx, byte [ebp - 0x110]
add ebx, 5
push ebx
call fcn.00403320
jmp 0x41524d
push 0x4cbc93
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
jbe 0x4151d8
lea edi, [ebp - 0x118]
mov esi, 0x4cbc98
push 4
call fcn.00401950
jmp 0x41523c
push 0x4cbc9c
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
jbe 0x415201
lea edi, [ebp - 0x118]
mov esi, 0x4cbca2
push 4
call fcn.00401950
jmp 0x41523c
push 0x4cbca7
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
jbe 0x41522a
lea edi, [ebp - 0x118]
mov esi, 0x4cbcac
push 4
call fcn.00401950
jmp 0x41523c
lea edi, [ebp - 0x118]
mov esi, 0x4cbcb0
push 4
call fcn.00401950
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x110]
call fcn.00401940
mov byte [ebp - 0x10], 0
lea esi, [ebp - 0x228]
mov edi, 0x4cbcb4
call fcn.00415520
test al, al
je 0x4154c7
lea esi, [ebp - 0x118]
mov edi, 0x4cbcb5
call fcn.00415520
test al, al
je 0x4153e1
lea eax, [ebp - 0x24c]
push eax
call fcn.004158e0
lea ebx, [ebp - 0x128]
push ebx
push 0xff
call fcn.00403b50
push 0xa
lea eax, [ebp - 0x240]
mov byte [eax], 0
push eax
mov eax, dword [0x4e91ad]
push dword [eax + 0xaf5]
push 0xa
call fcn.004158b0
add esp, 8
push dword [ebp - 0x128]
mov esi, 0x4e90ad
lea edi, [ebp - 0x850]
call fcn.00401b30
mov esi, 0x4cbcb9
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x750]
call fcn.00401b30
lea esi, [ebp - 0x228]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x650]
call fcn.00401b30
mov esi, 0x4cbcc6
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x550]
call fcn.00401b30
lea esi, [ebp - 0x24c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x450]
call fcn.00401b30
mov esi, 0x4cbcc9
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x350]
call fcn.00401b30
lea esi, [ebp - 0x240]
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x64
push 0x4e20
mov eax, dword [0x4e91ad]
call fcn.00415882
push 5
push dword [ebp - 0x128]
call sub.kernel32.dll_WinExec
mov word [ebp - 0x234], ax
lea ebx, [ebp - 0x128]
push ebx
push 0xff
call fcn.00403320
lea eax, [ebp - 0x124]
push eax
mov eax, dword [0x4e91ad]
call fcn.004146b2
cmp al, 0x2c
jne 0x415393
push 0x64
mov eax, dword [0x4e91ad]
call fcn.00415852
cmp word [ebp - 0x234], 0x1f
jle 0x4153d1
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x24c]
call fcn.00401940
jmp 0x4153e1
lea edi, [ebp - 0x228]
mov esi, 0x4cbccb
call fcn.00401940
lea esi, [ebp - 0x228]
mov edi, 0x4cbccc
call fcn.00415520
test al, al
je 0x4154c7
call fcn.004157d0
cmp word [ebp - 0x230], 0
jle 0x41549c
push 2
lea eax, [ebp - 0x124]
push eax
movsx ebx, word [ebp - 0x230]
push ebx
call sub.kernel32.dll__lread
lea edi, [ebp - 0x120]
mov esi, 0x4cbccd
push 6
call fcn.00401950
movzx eax, word [ebp - 0x124]
push eax
call fcn.004157c0
movzx ebx, al
mov byte [ebp - 0x11f], bl
movzx eax, word [ebp - 0x124]
push eax
call fcn.004157b0
movzx ebx, al
mov byte [ebp - 0x11e], bl
lea esi, [ebp - 0x120]
mov edi, 0x4cbcd0
call fcn.00415790
test al, al
je 0x41548f
push dword [ebp + 0xc]
mov ax, word [ebp - 0x230]
push eax
mov eax, dword [ebp - 4]
call fcn.00415542
test al, al
je 0x41548f
mov byte [ebp - 0x10], 1
movsx eax, word [ebp - 0x230]
push eax
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x24c]
mov edi, 0x4cbcd3
call fcn.00415520
test al, al
je 0x4154c7
push 0x4e9229
mov eax, esi
push eax
call fcn.00401e60
push 0x4e9229
call fcn.004154e0
mov al, byte [ebp - 0x10]
pop edx
pop ecx
pop ebx
leave
ret 8