Function at 0x4147f1
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x4a08fd
call fcn.00497a30
mov eax, 0x18d4
call fcn.00497ce0
push ebx
push esi
mov esi, ecx
add esi, 4
mov al, byte [esi]
cmp al, 0x20
je 0x414816
cmp al, 9
jne 0x414819
inc esi
jmp 0x41480c
xor ebx, ebx
push esi
mov dword [ebp - 0x14], ebx
call sub.MSVCR71.dll_strlen
test eax, eax
pop ecx
jbe 0x41485b
lea ecx, [ebp - 0x88c]
sub ecx, esi
mov ebx, esi
mov dword [ebp - 0x18], ecx
jmp 0x41483b
mov ecx, dword [ebp - 0x18]
mov al, byte [ebx]
cmp al, 0x20
je 0x414858
cmp al, 9
je 0x414858
inc dword [ebp - 0x14]
mov byte [ecx + ebx], al
push esi
inc ebx
call sub.MSVCR71.dll_strlen
cmp dword [ebp - 0x14], eax
pop ecx
jb 0x414838
mov ebx, dword [ebp - 0x14]
mov byte [ebp + ebx - 0x88c], 0
cmp byte [ebp - 0x88c], 0
jne 0x414885
push 0xffffffffffffffff
mov ecx, 0x466
call fcn.0040753b
push eax
mov ecx, edi
call fcn.0040e4b9
jmp 0x414a82
lea eax, [ebp - 0x88c]
push eax
lea ecx, [ebp - 0x88]
call fcn.00483141
and dword [ebp - 4], 0
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x64]
push eax
push dword [edi + 0x84b8]
call fcn.00404e2d
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 2
call fcn.004833a3
add ebx, esi
lea eax, [ebp - 0x18dc]
push ebx
push eax
call sub.MSVCR71.dll_strcpy
mov eax, dword [edi + 0x815c]
mov dword [ebp - 0x890], eax
lea eax, [edi + 0x8449]
push eax
lea eax, [ebp - 0x10a5]
push eax
mov dword [ebp - 0x10dc], 0x13
call sub.MSVCR71.dll_strcpy
lea eax, [edi + 0x8e31]
push eax
lea eax, [ebp - 0x10d7]
push eax
call sub.MSVCR71.dll_strcpy
mov eax, dword [ebp - 0x5c]
add esp, 0x18
cmp dword [ebp - 0x48], 0x10
jae 0x41491a
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1090]
push eax
call sub.MSVCR71.dll_strcpy
mov eax, dword [edi + 0x8164]
mov dword [ebp - 0x1094], eax
mov al, byte [0x4bb21b]
mov byte [ebp - 0x10d8], al
mov eax, dword [0x4bb2cc]
test eax, eax
pop ecx
pop ecx
je 0x414956
lea ecx, [ebp - 0x10dc]
push ecx
push eax
call fcn.0042b1c6
cmp byte [ebp - 0x10d8], 0
jne 0x414966
mov ecx, 0x45b
jmp 0x414982
push 0
lea eax, [ebp - 0x88c]
push 0
push eax
call fcn.00482231
add esp, 0xc
test al, al
je 0x414996
mov ecx, 0x49f
push 0xffffffffffffffff
call fcn.0040753b
push eax
mov ecx, edi
call fcn.0040e4b9
jmp 0x414a75
mov esi, dword [edi + 0x84c0]
test esi, esi
je 0x4149b0
cmp byte [ebp - 0x10d8], 0
jne 0x4149b0
mov bl, 1
call fcn.00456bca
mov esi, dword [edi + 0x84b8]
call fcn.00412efb
test al, al
je 0x4149d8
mov eax, dword [edi + 0x84b8]
call fcn.00412f2b
movsx eax, al
sub eax, 0x40
push eax
call dword [sym.imp.MSVCR71.dll__chdrive]
pop ecx
mov eax, dword [edi + 0x84b8]
add eax, 4
cmp dword [eax + 0x18], 0x10
jb 0x4149ec
mov eax, dword [eax + 4]
jmp 0x4149ef
add eax, 4
push eax
call dword [sym.imp.MSVCR71.dll__chdir]
pop ecx
lea eax, [ebp - 0x18dc]
push eax
lea eax, [ebp - 0x88c]
push eax
call sub.MSVCR71.dll_strcat
pop ecx
pop ecx
push 2
lea eax, [ebp - 0x88c]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov esi, dword [edi + 0x84c0]
cmp eax, 0x20
sbb ecx, ecx
add ecx, 0x45d
test esi, esi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ecx
je 0x414a40
xor bl, bl
call fcn.00456bca
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x14]
push 0xffffffffffffffff
call fcn.0040753b
push eax
lea eax, [ebp - 0x88c]
push eax
call dword [sym.imp.MSVCR71.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x88c]
push eax
mov ecx, edi
call fcn.0040e4b9
push 0x4b9334
call dword [sym.imp.MSVCR71.dll__chdir]
pop ecx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x64]
push eax
call fcn.00403e9b
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret