Function at 0x413d5f
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
push edi
mov dword [esi + 8], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4823c4], eax
mov eax, dword [0x481894]
xor ebx, ebx
cmp eax, ebx
jle 0x413e2f
cmp eax, 0x65
jge 0x413e2f
cmp dword [0x481898], ebx
jne 0x413da7
cmp dword [0x48189c], ebx
je 0x413e2f
cmp eax, ebx
mov dword [0x4818b0], ebx
mov dword [0x4818b4], ebx
mov dword [ebp - 4], ebx
jle 0x413e2f
mov dword [ebp + 8], ebx
mov ecx, dword [ebp + 8]
xor eax, eax
lea edi, [ebp - 0x10]
mov dword [ebp - 0x14], ebx
stosd dword es:[edi], eax
mov eax, dword [0x481890]
mov edi, 0x481080
add ecx, eax
push ecx
mov ecx, edi
call fcn.0041cafa
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x14]
push eax
mov eax, dword [0x481890]
add ecx, eax
call fcn.0041f120
push eax
mov ecx, 0x482328
call fcn.00411736
mov eax, dword [ebp - 0x14]
cmp eax, dword [0x4818b0]
jle 0x413e0b
mov dword [0x4818b0], eax
mov eax, dword [ebp - 0x10]
cmp eax, dword [0x4818b4]
jle 0x413e1b
mov dword [0x4818b4], eax
inc dword [ebp - 4]
add dword [ebp + 8], 0xc
mov eax, dword [ebp - 4]
cmp eax, dword [0x481894]
jl 0x413dbd
jmp 0x413e34
mov edi, 0x481080
cmp byte [0x48239c], bl
je 0x413ea6
call fcn.00426243
call fcn.004262c0
call fcn.0042637e
call fcn.004263ae
call fcn.004263de
call fcn.0042640e
call fcn.004264cb
call fcn.0042668e
call fcn.004267a8
call fcn.004268c2
call fcn.00426980
mov ecx, edi
call fcn.0041b4db
cmp byte [0x48239c], bl
je 0x413ea6
mov eax, dword [0x48175c]
cmp eax, dword [0x481754]
jb 0x413ea6
ja 0x413f35
mov eax, dword [0x481758]
cmp eax, dword [0x481750]
ja 0x413f35
cmp dword [0x481400], 3
jbe 0x413ece
cmp dword [0x481714], ebx
jne 0x413ece
push ebx
mov ecx, 0x481400
call fcn.0041f120
push eax
call fcn.0040ec7b
pop ecx
test al, al
pop ecx
je 0x413f35
mov ecx, edi
call fcn.0041c97c
push ebx
push ebx
mov ecx, esi
mov dword [0x481760], 1
call fcn.00416817
mov ecx, esi
call fcn.004136a4
test al, al
je 0x413f35
push 2
pop eax
test byte [0x481254], al
je 0x413f0e
mov ecx, esi
mov dword [0x481760], eax
call fcn.00411d31
test al, al
je 0x413f35
test byte [0x481254], 4
je 0x413f3c
push ebx
push ebx
mov ecx, esi
mov dword [0x481760], 3
call fcn.00416817
mov ecx, esi
call fcn.00411a2f
test al, al
jne 0x413f3c
xor al, al
jmp 0x414216
cmp byte [0x48239c], bl
mov dword [0x481760], 4
jne 0x413f6c
mov ecx, 0x481ff0
call fcn.0041f120
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.00420eff
pop ecx
pop ecx
push ebx
push ebx
mov ecx, 0x4819b0
call fcn.00416817
push ebx
push ebx
mov ecx, esi
call fcn.00416817
lea ecx, [ebp - 0x20]
mov byte [0x481949], 1
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
call fcn.0041e1c7
mov dword [ebp + 8], 0x481478
mov eax, dword [ebp + 8]
sub esp, 0xc
mov ecx, esp
mov eax, dword [eax]
mov dword [ebp - 4], eax
lea eax, [ebp - 0x20]
push eax
call fcn.0041e29b
lea eax, [ebp - 0xc]
mov ecx, esi
push eax
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
push dword [ebp - 4]
call fcn.00414ee2
add dword [ebp + 8], 0x44
cmp dword [ebp + 8], 0x481588
jl 0x413f9d
cmp dword [ebp - 8], ebx
jle 0x413ff5
push ebx
mov ecx, 0x481ffc
call fcn.0041f120
push eax
mov ecx, edi
push dword [esi + 8]
call fcn.0041d5f5
jmp 0x41420c
cmp byte [0x48239c], bl
mov dword [0x481760], 5
jne 0x414025
mov ecx, 0x482008
call fcn.0041f120
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.00420eff
pop ecx
pop ecx
push ebx
push ebx
mov ecx, esi
call fcn.00416817
mov ecx, esi
call fcn.00414d5a
test al, al
jne 0x41404f
push ebx
mov ecx, 0x482014
call fcn.0041f120
push eax
mov ecx, edi
push dword [esi + 8]
call fcn.0041d5f5
cmp byte [0x48239c], bl
mov dword [0x481760], 6
jne 0x41407f
mov ecx, 0x482020
call fcn.0041f120
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.00420eff
pop ecx
pop ecx
push ebx
push ebx
mov ecx, esi
call fcn.00416817
mov ecx, esi
call fcn.00414953
cmp byte [0x48239c], bl
mov dword [0x481760], 7
jne 0x4140bf
mov ecx, 0x48202c
call fcn.0041f120
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.00420eff
pop ecx
pop ecx
push ebx
push ebx
mov ecx, esi
call fcn.00416817
mov ecx, esi
call fcn.0041202b
test al, al
jne 0x4140e9
push ebx
mov ecx, 0x482038
call fcn.0041f120
push eax
mov ecx, edi
push dword [esi + 8]
call fcn.0041d5f5
cmp byte [0x48239c], bl
mov dword [0x481760], 8
jne 0x414119
mov ecx, 0x482044
call fcn.0041f120
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.00420eff
pop ecx
pop ecx
push ebx
push ebx
mov ecx, esi
call fcn.00416817
push 0x481640
mov ecx, esi
call fcn.00415892
push dword [esi + 8]
mov ecx, 0x4818b8
call fcn.00425909
test al, al
je 0x41420c
push ebx
push 0x64
mov ecx, esi
call fcn.00416817
cmp dword [0x481714], ebx
jne 0x414194
cmp dword [0x481598], ebx
mov eax, dword [0x481258]
jg 0x414169
test eax, 0x20000
jne 0x414194
cmp byte [0x48239c], bl
jne 0x4141e5
test eax, 0x10000
je 0x41419c
push 1
push 0x431188
push ebx
mov ecx, esi
call fcn.0041308b
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp byte [0x48239c], bl
jne 0x4141e5
mov ecx, 0x482328
call fcn.004112c1
push dword [0x481240]
call dword [sym.imp.USER32.dll_GetDC]
push 0xcc0020
push ebx
push ebx
mov esi, eax
push dword [0x48124c]
push dword [0x48123c]
push dword [0x481238]
push ebx
push ebx
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
push esi
push dword [0x481240]
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4141f4
call fcn.004269b0
call fcn.004269e0
call fcn.00426a91
cmp dword [0x481714], ebx
jne 0x41420a
push ebx
push ebx
push ebx
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov bl, 1
lea ecx, [ebp - 0x20]
call fcn.0041e2fd
mov al, bl
pop edi
pop esi
pop ebx
leave
ret 4