Function at 0x41afcf
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
cmp dword [ebp + 8], 0
jne 0x41b274
cmp dword [ebp + 0x1c], 0x800
jge 0x41b028
push 5
push 0
push 0x401
push dword [0x49d83f]
call dword [sym.imp.USER32.dll_PostMessageA]
nop
nop
nop
nop
jmp 0x41b3d8
push 0
push dword [ebp + 0x18]
call fcn.0041b3fe
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x5a4d
je 0x41b069
push 5
push 0
push 0x401
push dword [0x49d83f]
call dword [sym.imp.USER32.dll_PostMessageA]
nop
nop
nop
nop
jmp 0x41b3d8
mov ebx, dword [0x49d7ff]
mov dword [ebp - 0x10], ebx
call fcn.00403157
mov dword [ebp - 0x14], eax
push str._New.exe
push dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
push dword [ebx]
mov ecx, 3
call fcn.0040106b
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41b0a7
push ebx
call fcn.004435a3
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41b0bb
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp + 0x1c]
push 0x80000301
push 0
push dword [ebp + 0x18]
push 2
mov ebx, 0x910
call fcn.00447120
add esp, 0x1c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41b0fc
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov ebx, dword [0x49d7ff]
add ebx, 0x14
mov dword [ebp - 0x10], ebx
push htons
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x41b11f
mov eax, 0x472784
push eax
push OleUIBusyA
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x41b135
mov eax, 0x4722d5
push eax
push 2
mov ebx, 0x26c
call fcn.00448f40
add esp, 0x1c
mov ebx, dword [0x49d7ff]
add ebx, 0x14
mov dword [ebp - 0x10], ebx
push OleUIBusyA
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41b167
mov eax, 0x4722d5
push eax
push OleUIBusyA
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x41b17d
mov eax, 0x4722d5
push eax
push 2
mov ebx, 0x23c
call fcn.00445dc0
add esp, 0x1c
mov ebx, dword [0x49d7ff]
add ebx, 0x14
mov dword [ebp - 0x10], ebx
push OleUIBusyA
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x41b1b1
mov eax, 0x4722d5
push eax
push 1
mov ebx, 0x244
call fcn.00445db0
add esp, 0x10
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.004461c0
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.004461c0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 5
push dword [ebp - 0x14]
push dword [ebp - 0x10]
push dword [ebp - 4]
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
nop
nop
nop
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41b238
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41b248
push ebx
call fcn.004435a3
add esp, 4
push 6
push 0
push 0x401
push dword [0x49d83f]
call dword [sym.imp.USER32.dll_PostMessageA]
nop
nop
nop
nop
push dword [ebp + 0x18]
call fcn.0040baca
jmp 0x41b3d8
cmp dword [ebp + 8], 1
jne 0x41b3ce
cmp dword [ebp + 0xc], 0x800
jge 0x41b2af
push 5
push 0
push 0x401
push dword [0x49d83f]
call dword [sym.imp.USER32.dll_PostMessageA]
nop
nop
nop
nop
jmp 0x41b3d8
fild dword [ebp + 0x10]
fstp qword [ebp - 0x14]
fld qword [ebp - 0x14]
fmul qword [0x47278c]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp + 0xc]
fstp qword [ebp - 0x24]
fdiv qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.004027b0
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x64
jle 0x41b2ec
mov dword [ebp - 0xc], 0x64
push 0x49d9a7
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
push 0x80000301
push 0
push dword [ebp - 0xc]
push 1
mov ebx, 0x168
call fcn.004465e0
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x49ac2e
push dword [ebp - 0x10]
push 0x49ac30
mov ecx, 3
call fcn.0040106b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41b347
push ebx
call fcn.004435a3
add esp, 4
push 1
lea eax, [ebp - 0x14]
push eax
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
mov ebx, eax
test ebx, ebx
je 0x41b36e
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41b37e
push ebx
call fcn.004435a3
add esp, 4
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
push 0xff00
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
push 1
push dword [ebp - 0xc]
push 0x49d833
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
push 0x49d9a7
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
jmp 0x41b3d8
cmp dword [ebp + 8], 0xffffffff
jne 0x41b3d8
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41b3e8
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41b3f8
push ebx
call fcn.004435a3
add esp, 4
mov esp, ebp
pop ebp
ret 0x18