Function at 0x41a826
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
cmp dword [ebp + 8], 0
jne 0x41aacb
cmp dword [ebp + 0x1c], 0x800
jge 0x41a87f
push 5
push 0
push 0x401
push dword [0x49d73c]
call dword [sym.imp.USER32.dll_PostMessageA]
nop
nop
nop
nop
jmp 0x41ac2f
push 0
push dword [ebp + 0x18]
call fcn.0041ac55
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x5a4d
je 0x41a8c0
push 5
push 0
push 0x401
push dword [0x49d73c]
call dword [sym.imp.USER32.dll_PostMessageA]
nop
nop
nop
nop
jmp 0x41ac2f
mov ebx, dword [0x49d70c]
mov dword [ebp - 0x10], ebx
call fcn.00402c36
mov dword [ebp - 0x14], eax
push str._New.exe
push dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
push dword [ebx]
mov ecx, 3
call fcn.0040106b
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41a8fe
push ebx
call fcn.004430f9
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a912
push ebx
call fcn.004430f9
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp + 0x1c]
push 0x80000301
push 0
push dword [ebp + 0x18]
push 2
mov ebx, 0x910
call fcn.00446bc0
add esp, 0x1c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41a953
push ebx
call fcn.004430f9
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov ebx, dword [0x49d70c]
add ebx, 0x14
mov dword [ebp - 0x10], ebx
push htons
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x41a976
mov eax, 0x472784
push eax
push OleUIBusyA
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x41a98c
mov eax, 0x4722d5
push eax
push 2
mov ebx, 0x26c
call fcn.004488a0
add esp, 0x1c
mov ebx, dword [0x49d70c]
add ebx, 0x14
mov dword [ebp - 0x10], ebx
push OleUIBusyA
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41a9be
mov eax, 0x4722d5
push eax
push OleUIBusyA
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x41a9d4
mov eax, 0x4722d5
push eax
push 2
mov ebx, 0x23c
call fcn.00445bd0
add esp, 0x1c
mov ebx, dword [0x49d70c]
add ebx, 0x14
mov dword [ebp - 0x10], ebx
push OleUIBusyA
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x41aa08
mov eax, 0x4722d5
push eax
push 1
mov ebx, 0x244
call fcn.00445bc0
add esp, 0x10
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00445fd0
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00445fd0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 5
push dword [ebp - 0x14]
push dword [ebp - 0x10]
push dword [ebp - 4]
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
nop
nop
nop
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41aa8f
push ebx
call fcn.004430f9
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41aa9f
push ebx
call fcn.004430f9
add esp, 4
push 6
push 0
push 0x401
push dword [0x49d73c]
call dword [sym.imp.USER32.dll_PostMessageA]
nop
nop
nop
nop
push dword [ebp + 0x18]
call fcn.0040b60f
jmp 0x41ac2f
cmp dword [ebp + 8], 1
jne 0x41ac25
cmp dword [ebp + 0xc], 0x800
jge 0x41ab06
push 5
push 0
push 0x401
push dword [0x49d73c]
call dword [sym.imp.USER32.dll_PostMessageA]
nop
nop
nop
nop
jmp 0x41ac2f
fild dword [ebp + 0x10]
fstp qword [ebp - 0x14]
fld qword [ebp - 0x14]
fmul qword [0x49ab6e]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp + 0xc]
fstp qword [ebp - 0x24]
fdiv qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.00402524
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x64
jle 0x41ab43
mov dword [ebp - 0xc], 0x64
push 0x49d8b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
push 0x80000301
push 0
push dword [ebp - 0xc]
push 1
mov ebx, 0x168
call fcn.00448520
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x49ab76
push dword [ebp - 0x10]
push 0x49ab78
mov ecx, 3
call fcn.0040106b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41ab9e
push ebx
call fcn.004430f9
add esp, 4
push 1
lea eax, [ebp - 0x14]
push eax
push 0x49d754
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
mov ebx, eax
test ebx, ebx
je 0x41abc5
push ebx
call fcn.004430f9
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41abd5
push ebx
call fcn.004430f9
add esp, 4
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
push 0xff00
push 0x49d754
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
push 1
push dword [ebp - 0xc]
push 0x49d750
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
push 0x49d8b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
jmp 0x41ac2f
cmp dword [ebp + 8], 0xffffffff
jne 0x41ac2f
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41ac3f
push ebx
call fcn.004430f9
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41ac4f
push ebx
call fcn.004430f9
add esp, 4
mov esp, ebp
pop ebp
ret 0x18