Function at 0x41395c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x413c55
push dword fs:[eax]
mov dword fs:[eax], esp
push 1
push 0x413c68
push 0x413c6c
lea eax, [ebp - 0x10]
mov ecx, 0x413c78
mov edx, dword [0x416898]
call fcn.004046d0
mov eax, dword [ebp - 0x10]
call fcn.00404884
push eax
push 0x413c88
push 0
call sub.shell32.dll_ShellExecuteA
push 0xbb8
call sub.kernel32.dll_Sleep
lea eax, [ebp - 0x14]
mov ecx, 0x413c98
mov edx, dword [0x416898]
call fcn.004046d0
mov eax, dword [ebp - 0x14]
call fcn.00412f24
lea eax, [ebp - 0x18]
push eax
mov eax, dword [0x4154cc]
mov eax, dword [eax]
mov ecx, 1
mov edx, 1
call fcn.004048dc
mov eax, dword [ebp - 0x18]
call fcn.00407660
dec eax
jne 0x413c35
mov edx, dword [0x4154cc]
mov edx, dword [edx]
mov eax, 0x413cb4
call fcn.0040491c
mov ebx, eax
lea eax, [ebp - 0x1c]
push eax
lea esi, [ebx + 1]
mov edx, esi
mov eax, dword [0x4154cc]
mov eax, dword [eax]
mov ecx, 6
call fcn.004048dc
mov eax, dword [ebp - 0x1c]
mov edx, 0x413cc0
call fcn.004047d0
je 0x413af1
lea eax, [ebp - 4]
push eax
mov edx, esi
mov eax, dword [0x4154cc]
mov eax, dword [eax]
mov ecx, 0xc
call fcn.004048dc
xor eax, eax
push ebp
push 0x413adb
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 2
mov edx, 9
mov eax, dword [ebp - 4]
call fcn.004138ec
push eax
mov ecx, 2
mov edx, 0xb
mov eax, dword [ebp - 4]
call fcn.004138ec
push eax
push 0
push 0
mov ecx, 2
mov edx, 3
mov eax, dword [ebp - 4]
call fcn.004138ec
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.004138ec
push eax
mov ecx, 4
mov edx, 5
mov eax, dword [ebp - 4]
call fcn.004138ec
pop edx
pop ecx
call fcn.00413064
mov eax, dword [ebp + 8]
fstp qword [eax]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x413afb
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov edx, dword [0x4154cc]
mov edx, dword [edx]
mov eax, 0x413cd0
call fcn.0040491c
mov ebx, eax
lea eax, [ebp - 0x20]
push eax
lea esi, [ebx + 1]
mov edx, esi
mov eax, dword [0x4154cc]
mov eax, dword [eax]
mov ecx, 6
call fcn.004048dc
mov eax, dword [ebp - 0x20]
mov edx, 0x413cc0
call fcn.004047d0
je 0x413bf0
lea eax, [ebp - 8]
push eax
mov edx, esi
mov eax, dword [0x4154cc]
mov eax, dword [eax]
mov ecx, 0xc
call fcn.004048dc
xor eax, eax
push ebp
push 0x413bda
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 2
mov edx, 9
mov eax, dword [ebp - 8]
call fcn.004138ec
push eax
mov ecx, 2
mov edx, 0xb
mov eax, dword [ebp - 8]
call fcn.004138ec
push eax
push 0
push 0
mov ecx, 2
mov edx, 3
mov eax, dword [ebp - 8]
call fcn.004138ec
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004138ec
push eax
mov ecx, 4
mov edx, 5
mov eax, dword [ebp - 8]
call fcn.004138ec
pop edx
pop ecx
call fcn.00413064
mov eax, dword [ebp + 0xc]
fstp qword [eax]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x413bfa
mov eax, dword [ebp + 0xc]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov edx, dword [0x4154cc]
mov edx, dword [edx]
mov eax, 0x413cdc
call fcn.0040491c
mov ebx, eax
lea eax, [ebp - 0xc]
push eax
lea edx, [ebx + 1]
mov eax, dword [0x4154cc]
mov eax, dword [eax]
mov ecx, 0xa
call fcn.004048dc
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0x10]
call fcn.00407b68
xor ebx, ebx
jmp 0x413c3a
mov ebx, 0xcd
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x413c5c
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040440c
ret