Function at 0x41a429
Capabilities:
Create process on windows
Create process suspended
Get comspec environment variable
Query environment variable

Disassembly:
push 0x60
mov eax, 0x46bb7f
call fcn.0042dbd7
lea ecx, [ebp - 0x10]
xor ebx, ebx
call fcn.0040699e
mov dword [ebp - 4], ebx
cmp dword [ebp + 0xc], ebx
jne 0x41a48c
push 4
mov esi, 0x493f4c
push str.IN_Operations::cmdOp_:_parameter_szCmd_is_NULL__return_false
mov ecx, esi
call fcn.0040c5b8
push 5
push str.Command_line_command:_Incorrect_parameters
mov ecx, esi
call fcn.0040c5b8
mov eax, str.Command_line_command_unsuccessful
push 3
pop ecx
push ecx
push eax
mov ecx, esi
call fcn.0040c5b8
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00406c57
mov al, bl
call fcn.0042dba0
ret
push dword [ebp + 0xc]
call fcn.00436130
add eax, 0x10a
push eax
mov dword [ebp - 0x18], eax
call fcn.00432c26
push 0x104
mov edi, eax
call fcn.00432c26
add esp, 0xc
mov dword [ebp - 0x14], eax
test edi, edi
je 0x41a642
test eax, eax
je 0x41a642
push dword [ebp + 8]
lea eax, [ebp - 0x10]
push str.IN_Operations::cmdOp_:_Entering_cmdOp___main_parameters:__s
push eax
call fcn.00406b1a
mov eax, dword [ebp - 0x10]
add esp, 0xc
cmp dword [eax - 4], 1
jle 0x41a4ef
push dword [eax - 0xc]
lea ecx, [ebp - 0x10]
call fcn.00406aae
mov eax, dword [ebp - 0x10]
push 4
mov esi, 0x493f4c
push eax
mov ecx, esi
call fcn.0040c5b8
push 0x44
lea eax, [ebp - 0x6c]
push ebx
push eax
call fcn.0042f1f0
push 0x10
lea eax, [ebp - 0x28]
push ebx
push eax
call fcn.0042f1f0
add esp, 0x18
mov dword [ebp - 0x6c], 0x44
mov dword [ebp - 0x64], str.winsta0default
push 0x104
push dword [ebp - 0x14]
push str.COMSPEC
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
call fcn.00421b6a
push dword [ebp + 0xc]
test al, al
mov edx, str.__s___s__s
push 0x471f00
push dword [ebp - 0x14]
mov ecx, str.__s___s___s_
cmove ecx, edx
push ecx
push dword [ebp - 0x18]
push edi
call fcn.00404ae0
push edi
lea eax, [ebp - 0x10]
push str.IN_Operations::cmdOp_:_running_command_line__s
push eax
call fcn.00406b1a
mov eax, dword [ebp - 0x10]
add esp, 0x24
cmp dword [eax - 4], 1
jle 0x41a589
push dword [eax - 0xc]
lea ecx, [ebp - 0x10]
call fcn.00406aae
push 4
push dword [ebp - 0x10]
mov ecx, esi
call fcn.0040c5b8
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x6c]
push eax
push dword [ebp + 0x10]
push ebx
push 0x8000000
push ebx
push ebx
push ebx
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp eax, 1
jne 0x41a5ea
cmp dword [ebp - 0x28], 0
je 0x41a5dc
push 0xffffffffffffffff
push dword [ebp - 0x28]
mov bl, al
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
jne 0x41a622
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.WaitForSingleObject___failed._Error:__d
jmp 0x41a5f6
push str.IN_Operations::cmdOp_:_Unable_to_get_process_handle
mov ecx, esi
call fcn.0040c5a7
jmp 0x41a622
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateProcess___failed._Error:__d
lea eax, [ebp - 0x10]
push eax
call fcn.00406b1a
mov eax, dword [ebp - 0x10]
add esp, 0xc
cmp dword [eax - 4], 1
jle 0x41a616
push dword [eax - 0xc]
lea ecx, [ebp - 0x10]
call fcn.00406aae
push 7
push dword [ebp - 0x10]
mov ecx, esi
call fcn.0040c5b8
cmp dword [ebp - 0x24], 0
je 0x41a631
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x28], 0
je 0x41a659
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x41a659
push 6
mov esi, 0x493f4c
push str.Operations::cmdOp__szCmdLine
mov ecx, esi
call fcn.0040c5b8
test edi, edi
je 0x41a660
push edi
call fcn.00432c0b
pop ecx
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x41a66e
push eax
call fcn.00432c0b
pop ecx
test bl, bl
je 0x41a468
mov eax, str.Command_line_command_successful
push 2
jmp 0x41a46f