Function at 0x4148d2
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x4a0b69
call fcn.00497cb0
mov eax, 0x18d4
call fcn.00497f60
push ebx
push esi
mov esi, ecx
add esi, 4
mov al, byte [esi]
cmp al, 0x20
je 0x4148f7
cmp al, 9
jne 0x4148fa
inc esi
jmp 0x4148ed
xor ebx, ebx
push esi
mov dword [ebp - 0x14], ebx
call sub.MSVCR71.dll_strlen
test eax, eax
pop ecx
jbe 0x41493c
lea ecx, [ebp - 0x88c]
sub ecx, esi
mov ebx, esi
mov dword [ebp - 0x18], ecx
jmp 0x41491c
mov ecx, dword [ebp - 0x18]
mov al, byte [ebx]
cmp al, 0x20
je 0x414939
cmp al, 9
je 0x414939
inc dword [ebp - 0x14]
mov byte [ecx + ebx], al
push esi
inc ebx
call sub.MSVCR71.dll_strlen
cmp dword [ebp - 0x14], eax
pop ecx
jb 0x414919
mov ebx, dword [ebp - 0x14]
mov byte [ebp + ebx - 0x88c], 0
cmp byte [ebp - 0x88c], 0
jne 0x414966
push 0xffffffffffffffff
mov ecx, 0x466
call fcn.004075db
push eax
mov ecx, edi
call fcn.0040e512
jmp 0x414b63
lea eax, [ebp - 0x88c]
push eax
lea ecx, [ebp - 0x88]
call fcn.00483361
and dword [ebp - 4], 0
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x64]
push eax
push dword [edi + 0x84b8]
call fcn.00404e9e
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 2
call fcn.004835c3
add ebx, esi
lea eax, [ebp - 0x18dc]
push ebx
push eax
call sub.MSVCR71.dll_strcpy
mov eax, dword [edi + 0x815c]
mov dword [ebp - 0x890], eax
lea eax, [edi + 0x8449]
push eax
lea eax, [ebp - 0x10a5]
push eax
mov dword [ebp - 0x10dc], 0x13
call sub.MSVCR71.dll_strcpy
lea eax, [edi + 0x8e31]
push eax
lea eax, [ebp - 0x10d7]
push eax
call sub.MSVCR71.dll_strcpy
mov eax, dword [ebp - 0x5c]
add esp, 0x18
cmp dword [ebp - 0x48], 0x10
jae 0x4149fb
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1090]
push eax
call sub.MSVCR71.dll_strcpy
mov eax, dword [edi + 0x8164]
mov dword [ebp - 0x1094], eax
mov al, byte [0x4bb21b]
mov byte [ebp - 0x10d8], al
mov eax, dword [0x4bb2cc]
test eax, eax
pop ecx
pop ecx
je 0x414a37
lea ecx, [ebp - 0x10dc]
push ecx
push eax
call fcn.0042b730
cmp byte [ebp - 0x10d8], 0
jne 0x414a47
mov ecx, 0x45b
jmp 0x414a63
push 0
lea eax, [ebp - 0x88c]
push 0
push eax
call fcn.00482451
add esp, 0xc
test al, al
je 0x414a77
mov ecx, 0x49f
push 0xffffffffffffffff
call fcn.004075db
push eax
mov ecx, edi
call fcn.0040e512
jmp 0x414b56
mov esi, dword [edi + 0x84c0]
test esi, esi
je 0x414a91
cmp byte [ebp - 0x10d8], 0
jne 0x414a91
mov bl, 1
call fcn.00456f34
mov esi, dword [edi + 0x84b8]
call fcn.00412f76
test al, al
je 0x414ab9
mov eax, dword [edi + 0x84b8]
call fcn.00412fa6
movsx eax, al
sub eax, 0x40
push eax
call dword [sym.imp.MSVCR71.dll__chdrive]
pop ecx
mov eax, dword [edi + 0x84b8]
add eax, 4
cmp dword [eax + 0x18], 0x10
jb 0x414acd
mov eax, dword [eax + 4]
jmp 0x414ad0
add eax, 4
push eax
call dword [sym.imp.MSVCR71.dll__chdir]
pop ecx
lea eax, [ebp - 0x18dc]
push eax
lea eax, [ebp - 0x88c]
push eax
call sub.MSVCR71.dll_strcat
pop ecx
pop ecx
push 2
lea eax, [ebp - 0x88c]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov esi, dword [edi + 0x84c0]
cmp eax, 0x20
sbb ecx, ecx
add ecx, 0x45d
test esi, esi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ecx
je 0x414b21
xor bl, bl
call fcn.00456f34
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x14]
push 0xffffffffffffffff
call fcn.004075db
push eax
lea eax, [ebp - 0x88c]
push eax
call dword [sym.imp.MSVCR71.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x88c]
push eax
mov ecx, edi
call fcn.0040e512
push 0x4b9334
call dword [sym.imp.MSVCR71.dll__chdir]
pop ecx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x64]
push eax
call fcn.00414041
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret