Function at 0x4cdcb0
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5783f2
mov eax, dword fs:[0]
push eax
sub esp, 0x1a0
mov eax, dword [0x5bafe0]
xor eax, esp
mov dword [esp + 0x198], eax
push ebx
push esi
push edi
mov eax, dword [0x5bafe0]
xor eax, esp
push eax
lea eax, [esp + 0x1b0]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x2c]
push eax
mov esi, edx
call fcn.004ce170
xor ebx, ebx
mov dword [esp + 0x1b8], ebx
xor ecx, ecx
mov eax, esi
mov dword [esp + 0x1a0], 7
mov dword [esp + 0x19c], ebx
mov word [esp + 0x18c], cx
lea edx, [eax + 2]
jmp 0x4cdd30
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4cdd30
sub eax, edx
sar eax, 1
push eax
push esi
lea ecx, [esp + 0x194]
call fcn.00402850
lea edx, [esp + 0x18c]
push edx
lea eax, [esp + 0x174]
push eax
mov byte [esp + 0x1c0], 1
call fcn.004cdc40
add esp, 8
push str.__method_post__
push ecx
push eax
push ecx
lea ecx, [esp + 0x4c]
push str.__DOCTYPE_html__html__head__title___title__script_type_text_javascript__function_pix_post__document.getElementById__pix_from__.submit_____script___head__body_onload_pix_post_____form_id_pix_from__action_
push ecx
mov byte [esp + 0x1d0], 2
call fcn.0043a8f0
add esp, 0xc
push eax
call fcn.00438870
add esp, 0xc
push eax
call fcn.0043a8f0
add esp, 8
cmp dword [esp + 0x184], 0x10
jb 0x4cddbb
mov edx, dword [esp + 0x170]
push edx
call fcn.0052b74a
add esp, 4
mov byte [esp + 0x1b8], bl
cmp dword [esp + 0x1a0], 8
mov dword [esp + 0x184], 0xf
mov dword [esp + 0x180], ebx
mov byte [esp + 0x170], bl
jb 0x4cddf5
mov eax, dword [esp + 0x18c]
push eax
call fcn.0052b74a
add esp, 4
cmp edi, ebx
je 0x4cde74
cmp byte [edi], bl
je 0x4cde74
lea ecx, [esp + 0x3c]
push str._input_type_hidden__name_
push ecx
call fcn.0043a8f0
mov cl, byte [edi]
add esp, 8
cmp cl, bl
je 0x4cde62
cmp cl, 0x26
je 0x4cde39
cmp cl, 0x3d
je 0x4cde2e
lea edx, [esp + 0x3c]
push edx
call fcn.004ce420
add esp, 4
jmp 0x4cde5a
push str.__value_
lea eax, [esp + 0x40]
jmp 0x4cde51
push str._input_type_hidden__name_
push ecx
lea ecx, [esp + 0x44]
push 0x59bfd4
push ecx
call fcn.0043a8f0
add esp, 0xc
push eax
call fcn.0043a8f0
add esp, 8
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x4cde15
lea edx, [esp + 0x3c]
push 0x59bfd4
push edx
call fcn.0043a8f0
add esp, 8
lea eax, [esp + 0x3c]
push str.__form___body___html_
push eax
call fcn.0043a8f0
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 4]
mov esi, dword [esp + edx + 0x6c]
add esp, 8
cmp esi, ebx
sete al
lea ecx, [esp + 0xd4]
push ecx
mov byte [esp + 0x24], al
xor edi, edi
mov byte [esp + 0x2c], 1
call fcn.00414c90
lea edx, [esp + 0xd4]
push str.data:text_html_base64_
push edx
mov byte [esp + 0x1c0], 3
call fcn.00413660
mov eax, dword [esp + 0xdc]
mov ecx, dword [eax + 4]
mov eax, dword [esp + ecx + 0x114]
mov ecx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x34]
mov byte [esp + 0x20], bl
mov edx, dword [esp + 0x20]
push edx
push eax
push edi
push ecx
lea edx, [esp + 0x38]
push esi
push edx
call fcn.004ce6c0
add esp, 0x24
lea ecx, [esp + 0x170]
lea eax, [esp + 0xd4]
call fcn.00414120
mov esi, 8
cmp dword [eax + 0x14], esi
jb 0x4cdf1b
mov eax, dword [eax]
push 3
push ebx
push eax
push str.firefox.exe
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
setg byte [esp + 0x13]
cmp dword [esp + 0x184], esi
jb 0x4cdf51
mov eax, dword [esp + 0x170]
push eax
call fcn.0052b74a
add esp, 4
mov eax, dword [esp + 0xd4]
xor ecx, ecx
mov dword [esp + 0x184], 7
mov dword [esp + 0x180], ebx
mov word [esp + 0x170], cx
mov ecx, dword [eax + 4]
lea edx, [esp + 0x124]
mov dword [esp + 0x14], edx
mov dword [esp + ecx + 0xd4], vtable.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov byte [esp + 0x1b8], 4
test byte [esp + 0x118], 1
mov dword [esp + 0xd8], vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
je 0x4cdfbc
mov edx, dword [esp + 0xe8]
mov eax, dword [edx]
push eax
call fcn.0052b74a
add esp, 4
mov eax, dword [esp + 0xe8]
mov dword [eax], ebx
mov ecx, dword [esp + 0xf8]
mov dword [ecx], ebx
mov edx, dword [esp + 0x108]
mov dword [edx], ebx
mov eax, dword [esp + 0xec]
mov dword [eax], ebx
mov ecx, dword [esp + 0xfc]
mov dword [ecx], ebx
mov edx, dword [esp + 0x10c]
mov dword [edx], ebx
mov edi, 0xfffffffe
and dword [esp + 0x118], edi
lea ecx, [esp + 0xd8]
mov dword [esp + 0x114], ebx
call fcn.00411c10
mov byte [esp + 0x1b8], bl
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax + 4]
lea edx, [esp + 0x124]
mov dword [esp + ecx + 0xd4], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov esi, vtable.std::ios_base.0
push edx
mov dword [esp + 0x128], esi
call fcn.0050fb4a
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 4]
lea eax, [esp + 0x90]
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + edx + 0x2c], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [esp + 0x1b8], 5
test byte [esp + 0x84], 1
mov dword [esp + 0x44], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
je 0x4ce08f
mov eax, dword [esp + 0x54]
mov eax, dword [eax]
push eax
call fcn.0052b74a
add esp, 4
mov ecx, dword [esp + 0x54]
mov dword [ecx], ebx
mov edx, dword [esp + 0x64]
mov dword [edx], ebx
mov eax, dword [esp + 0x74]
mov dword [eax], ebx
mov ecx, dword [esp + 0x58]
mov dword [ecx], ebx
mov edx, dword [esp + 0x68]
mov dword [edx], ebx
mov eax, dword [esp + 0x78]
mov dword [eax], ebx
and dword [esp + 0x84], edi
lea ecx, [esp + 0x44]
mov dword [esp + 0x80], ebx
call fcn.0043ba60
mov dword [esp + 0x1b8], 0xffffffff
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 4]
mov dword [esp + edx + 0x2c], vtable.std::basic_iostream_char__struct_std::char_traits_char__.0
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 4]
mov dword [esp + ecx + 0x3c], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x8c]
mov dword [esp + eax + 0x2c], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
push ecx
mov dword [esp + 0x90], esi
call fcn.0050fb4a
mov al, byte [esp + 0x17]
add esp, 4
mov ecx, dword [esp + 0x1b0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x198]
xor ecx, esp
call fcn.0052b755
mov esp, ebp
pop ebp
ret