Function at 0x41e1d9
Capabilities:
Create process on windows

Disassembly:
push 0x7c
mov eax, 0x4960e3
call fcn.00470906
mov esi, ecx
xor ebx, ebx
cmp dword [esi + 0x4c], ebx
je 0x41e1f8
xor eax, eax
call fcn.004709de
ret 4
lea edi, [esi + 0x468]
mov ecx, edi
call fcn.00401219
test al, al
jne 0x41e1ee
push edi
lea ecx, [ebp - 0x14]
call fcn.0044e1c0
cmp byte [ebp - 0xd], 0xff
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x14]
jne 0x41e221
mov eax, dword [ebp - 0x14]
push 0x4a2770
push eax
call fcn.0046f770
pop ecx
test eax, eax
lea eax, [esi + 0x164]
pop ecx
push eax
lea eax, [ebp - 0x34]
jne 0x41e250
push str._distcode
push eax
call fcn.0044eb90
add esp, 0xc
mov byte [ebp - 4], 1
jmp 0x41e262
push 0x4a34c8
push eax
call fcn.0044eb90
add esp, 0xc
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x14]
call fcn.0044e7c0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.0044e260
lea eax, [esi + 0x1a8]
push eax
lea eax, [ebp - 0x34]
push 0x4a34c0
push eax
call fcn.0044eb90
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.0044e7c0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.0044e260
lea eax, [esi + 0x190]
push eax
lea eax, [ebp - 0x34]
push str.li
push eax
call fcn.0044eb90
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.0044e7c0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.0044e260
lea ecx, [ebp - 0x2c]
call fcn.0044e010
mov eax, dword [esi + 0x67c]
mov byte [ebp - 4], 5
cmp eax, 1
jb 0x41e318
push eax
push 0x2c
lea eax, [ebp - 0x34]
push eax
lea ecx, [esi + 0x4f0]
call fcn.0044ebe0
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.0044e310
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 5
call fcn.0044e260
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push str.cancelled
push eax
call fcn.0044eb90
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 7
call fcn.0044e7c0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 5
call fcn.0044e260
lea ecx, [ebp - 0x24]
call fcn.0044e010
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.0044e010
mov edi, dword [esi + 0x5fc]
mov byte [ebp - 4], 9
jmp 0x41e441
cmp dword [edi + 8], ebx
je 0x41e3d2
lea ecx, [ebp - 0x24]
call fcn.00401219
test al, al
jne 0x41e3a8
push 0x4a31b0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0044eb40
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xa
call fcn.0044e310
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.0044e260
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0044eaf0
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xb
call fcn.0044e310
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 9
call fcn.0044e260
cmp dword [edi + 0xc], ebx
je 0x41e43b
lea ecx, [ebp - 0x1c]
call fcn.00401219
test al, al
jne 0x41e411
push 0x4a31b0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0044eb40
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
call fcn.0044e310
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 9
call fcn.0044e260
push edi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.0044eaf0
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
call fcn.0044e310
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.0044e260
add edi, 0xe0
cmp edi, dword [esi + 0x600]
jne 0x41e369
lea ecx, [ebp - 0x24]
call fcn.00401219
mov esi, str.none
test al, al
je 0x41e467
push esi
lea ecx, [ebp - 0x24]
call fcn.0044e3b0
lea ecx, [ebp - 0x1c]
call fcn.00401219
test al, al
je 0x41e47c
push esi
lea ecx, [ebp - 0x1c]
call fcn.0044e3b0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x3c]
push str.displayedoffer
push eax
call fcn.0044eb90
push str.acceptedoffer
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0xe
call fcn.0044eb40
lea ecx, [ebp - 0x1c]
push ecx
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0xf
call fcn.0044eaf0
add esp, 0x24
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call fcn.0044e7c0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.0044e260
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xe
call fcn.0044e260
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 9
call fcn.0044e260
push dword [ebp + 8]
lea eax, [ebp - 0x4c]
push str.action
push eax
call fcn.0044eb90
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call fcn.0044e7c0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.0044e260
push 0x38
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.00470280
add esp, 0xc
cmp byte [ebp - 0xd], 0xff
mov dword [ebp - 0x88], 0x3c
mov dword [ebp - 0x84], 0x440
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], 0x4a09d8
lea eax, [ebp - 0x14]
jne 0x41e550
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x78], eax
xor esi, esi
lea eax, [ebp - 0x88]
inc esi
push eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], esi
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
je 0x41e5af
push dword [ebp - 0x50]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.0044e260
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.0044e260
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0044e260
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0044e260
mov eax, esi
jmp 0x41e1f0
xor esi, esi
jmp 0x41e579