Function at 0x41467d
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
xor ebx, ebx
cmp byte [ebp + 0xc], bl
push esi
push edi
mov esi, 0x481080
je 0x414705
mov edi, 0x481274
mov ecx, esi
push edi
call fcn.0041843c
push edi
mov ecx, esi
call fcn.0041cafa
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041d79d
push 1
mov edi, 0x481274
push ebx
push 0x42eb7c
mov ecx, edi
call fcn.0041ebdd
push eax
push ebx
mov ecx, edi
call fcn.0041f097
push eax
lea ecx, [ebp - 0xc]
call fcn.0041e29b
push 1
lea ecx, [ebp - 0xc]
call fcn.0041f120
push eax
push ebx
mov ecx, edi
call fcn.0041f120
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xc]
call fcn.0041e2fd
cmp byte [ebp + 8], bl
je 0x414897
mov edi, 0x481268
mov ecx, esi
push edi
call fcn.0041843c
push edi
mov ecx, esi
call fcn.0041cafa
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041d79d
lea ecx, [ebp - 0x18]
call fcn.0041e1c7
lea ecx, [ebp - 0x24]
call fcn.0041e1c7
push ebx
mov ecx, 0x481268
call fcn.0041e3e5
cmp al, 0x22
jne 0x414795
mov ecx, 0x481268
call fcn.0041f120
inc eax
lea ecx, [ebp - 0xc]
push eax
call fcn.0041e237
push 1
push ebx
push 0x42f068
lea ecx, [ebp - 0xc]
call fcn.0041ead2
cmp eax, 0xffffffff
je 0x41478b
push eax
push ebx
lea ecx, [ebp - 0xc]
call fcn.0041f097
push eax
lea ecx, [ebp - 0x18]
call fcn.0041e382
lea ecx, [ebp - 0xc]
call fcn.0041e2fd
jmp 0x41479e
push edi
lea ecx, [ebp - 0x18]
call fcn.0041e382
cmp dword [ebp - 0x18], ebx
jbe 0x4147d0
push 1
push ebx
push 0x42eb7c
lea ecx, [ebp - 0x18]
call fcn.0041ebdd
cmp eax, 0xffffffff
je 0x4147d0
cmp eax, 1
jle 0x4147d0
push eax
push ebx
lea ecx, [ebp - 0x18]
call fcn.0041f097
push eax
lea ecx, [ebp - 0x24]
call fcn.0041e382
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00426f90
push 0x44
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.00426f90
add esp, 0x18
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x84], 0x44
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041e1c7
push ebx
mov ecx, 0x481268
call fcn.0041e3e5
cmp al, 0x22
jne 0x414824
push edi
lea ecx, [ebp - 0x30]
call fcn.0041e382
jmp 0x414840
mov ecx, 0x481268
call fcn.0041f120
push eax
lea eax, [ebp - 0x30]
push 0x42f060
push eax
call fcn.0041e869
add esp, 0xc
cmp dword [ebp - 0x24], ebx
jbe 0x41484f
lea ecx, [ebp - 0x24]
call fcn.0041f120
jmp 0x414851
xor eax, eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x84]
push ecx
push eax
push ebx
push 0x4000000
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.0041f120
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x30]
call fcn.0041e2fd
lea ecx, [ebp - 0x24]
call fcn.0041e2fd
lea ecx, [ebp - 0x18]
call fcn.0041e2fd
cmp byte [ebp + 0x10], bl
je 0x41494c
mov edi, 0x48134c
mov ecx, esi
push edi
call fcn.0041843c
push edi
mov ecx, esi
call fcn.0041cafa
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041d79d
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00426f90
push 0x44
lea eax, [ebp - 0x84]
pop esi
push esi
push ebx
push eax
call fcn.00426f90
add esp, 0x18
lea ecx, [ebp - 0xc]
mov dword [ebp - 0x84], esi
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041e1c7
mov ecx, 0x48134c
call fcn.0041f120
push eax
lea eax, [ebp - 0xc]
push 0x42f060
push eax
call fcn.0041e869
add esp, 0xc
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xc]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push ebx
push 0x4000000
push ebx
push ebx
push ebx
call fcn.0041f120
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xc]
call fcn.0041e2fd
pop edi
pop esi
pop ebx
leave
ret 0xc