Function at 0x41a870
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x11
push 0
push 0
dec ecx
jne 0x41a878
push ebx
push esi
push edi
mov eax, 0x41a7d8
call fcn.00405f00
xor eax, eax
push ebp
push 0x41b056
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x41dac4
call fcn.004042bc
mov eax, 0x41dac8
call fcn.004042bc
xor eax, eax
mov dword [0x41d8e4], eax
lea edx, [ebp - 0x18]
xor eax, eax
call fcn.00402994
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
call fcn.00407a1c
mov edx, dword [ebp - 0x14]
mov eax, 0x41dad4
call fcn.00404310
call fcn.00402934
mov esi, eax
test esi, esi
jle 0x41a923
mov ebx, 1
push dword [0x41dac4]
lea edx, [ebp - 0x1c]
mov eax, ebx
call fcn.00402994
push dword [ebp - 0x1c]
push 0x41b070
mov eax, 0x41dac4
mov edx, 3
call fcn.0040463c
cmp ebx, 2
jne 0x41a91f
mov edx, 0x41dac8
mov eax, ebx
call fcn.00402994
inc ebx
dec esi
jne 0x41a8e7
mov eax, 0x41daf4
xor ecx, ecx
mov edx, 0x44
call fcn.00402ef4
mov dword [0x41daf4], 0x44
mov dword [0x41db20], 1
mov word [0x41db24], 4
push 0x41db38
push 0x41daf4
push 0
push 0
push 0x4000000
push 0
push 0
push 0
push dword [0x41dad4]
push 0x41b07c
push dword [0x41dac4]
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.0040463c
mov eax, dword [ebp - 0x20]
call fcn.0040476c
push eax
push 0
call sub.kernel32.dll_CreateProcessA
push 0xffffffffffffffff
mov eax, dword [0x41db38]
push eax
call sub.kernel32.dll_WaitForSingleObject
mov eax, 0x41dad8
call fcn.004042bc
call fcn.00402934
cmp eax, 2
jne 0x41aac9
lea eax, [ebp - 0x24]
mov ecx, 0x41b094
mov edx, dword [0x41dad4]
call fcn.004045c8
mov eax, dword [ebp - 0x24]
call fcn.004079bc
test al, al
je 0x41aac9
lea eax, [ebp - 0x28]
mov ecx, 0x41b094
mov edx, dword [0x41dad4]
call fcn.004045c8
mov edx, dword [ebp - 0x28]
mov eax, 0x41d8f8
call fcn.00402d1c
mov eax, 0x41d8f8
call fcn.00402ab8
call fcn.00402774
jmp 0x41aaa1
mov edx, 0x41dacc
mov eax, 0x41d8f8
call fcn.00403048
mov eax, 0x41d8f8
call fcn.004030b4
call fcn.00402774
lea edx, [ebp - 0x2c]
mov eax, dword [0x41dacc]
call fcn.00407438
mov eax, dword [ebp - 0x2c]
mov edx, 0x41b0a8
call fcn.004046c8
jne 0x41aaa1
mov eax, 0x41d8f8
call fcn.00402ebc
call fcn.00402774
test al, al
jne 0x41aaa1
mov edx, 0x41dacc
mov eax, 0x41d8f8
call fcn.00403048
mov eax, 0x41d8f8
call fcn.004030b4
call fcn.00402774
lea edx, [ebp - 0x30]
mov eax, dword [0x41dacc]
call fcn.00407438
mov ecx, dword [ebp - 0x30]
mov eax, 0x41dad8
mov edx, dword [0x41dad4]
call fcn.004045c8
jmp 0x41aab8
mov eax, 0x41d8f8
call fcn.00402ebc
call fcn.00402774
test al, al
je 0x41aa14
mov eax, 0x41d8f8
call fcn.00402dd8
call fcn.00402774
jmp 0x41aadf
mov eax, 0x41dad8
mov ecx, dword [0x41dac8]
mov edx, dword [0x41dad4]
call fcn.004045c8
cmp dword [0x41dad8], 0
je 0x41b038
lea eax, [ebp - 0x34]
mov ecx, 0x41b0bc
mov edx, dword [0x41dad8]
call fcn.004045c8
mov eax, dword [ebp - 0x34]
call fcn.004079bc
test al, al
je 0x41b038
lea eax, [ebp - 0x38]
mov ecx, 0x41b0bc
mov edx, dword [0x41dad8]
call fcn.004045c8
mov edx, dword [ebp - 0x38]
mov eax, 0x41d8f8
call fcn.00402d1c
mov eax, 0x41d8f8
call fcn.00402ab8
call fcn.00402774
xor ebx, ebx
mov eax, 0x41dadc
call fcn.004042bc
jmp 0x41ab9c
inc ebx
mov edx, 0x41dacc
mov eax, 0x41d8f8
call fcn.00403048
mov eax, 0x41d8f8
call fcn.004030b4
call fcn.00402774
lea edx, [ebp - 0x3c]
mov eax, dword [0x41dacc]
call fcn.00407438
mov edx, dword [ebp - 0x3c]
mov eax, 0x41dacc
call fcn.00404310
cmp ebx, 4
jne 0x41ab9c
mov eax, 0x41dadc
mov edx, dword [0x41dacc]
call fcn.00404310
jmp 0x41abaf
mov eax, 0x41d8f8
call fcn.00402ebc
call fcn.00402774
test al, al
je 0x41ab4c
mov eax, 0x41d8f8
call fcn.00402dd8
call fcn.00402774
cmp dword [0x41dadc], 0
je 0x41b038
lea eax, [ebp - 0x40]
mov ecx, 0x41b0d0
mov edx, dword [0x41dad4]
call fcn.004045c8
mov eax, dword [ebp - 0x40]
call fcn.004079bc
test al, al
je 0x41b038
lea eax, [ebp - 0x44]
mov ecx, 0x41b0d0
mov edx, dword [0x41dad4]
call fcn.004045c8
mov ecx, dword [ebp - 0x44]
mov dl, 1
mov eax, dword [0x41383c]
call fcn.004138ec
mov dword [0x41daec], eax
push 0x41b0e4
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x41b0f0
mov edx, 0x41b100
mov eax, dword [0x41daec]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x48]
mov eax, 0x41dae8
call fcn.00404310
push 0
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [0x41dadc]
mov edx, 0x41b110
mov eax, dword [0x41daec]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x4c]
mov eax, 0x41dacc
call fcn.00404310
cmp dword [0x41dacc], 0
je 0x41b02e
lea eax, [ebp - 0x50]
mov ecx, 0x41b124
mov edx, dword [0x41dad8]
call fcn.004045c8
mov eax, dword [ebp - 0x50]
call fcn.004079bc
test al, al
je 0x41ad1f
lea eax, [ebp - 0x54]
mov ecx, 0x41b124
mov edx, dword [0x41dad8]
call fcn.004045c8
mov edx, dword [ebp - 0x54]
mov eax, 0x41d8f8
call fcn.00402d1c
mov eax, 0x41d8f8
call fcn.00402ab8
call fcn.00402774
jmp 0x41acfd
mov edx, 0x41dad0
mov eax, 0x41d8f8
call fcn.00403048
mov eax, 0x41d8f8
call fcn.004030b4
call fcn.00402774
lea edx, [ebp - 0x58]
mov eax, dword [0x41dad0]
call fcn.00407438
cmp dword [ebp - 0x58], 0
je 0x41acfd
inc dword [0x41d8e4]
mov eax, 0x41d8f8
call fcn.00402ebc
call fcn.00402774
test al, al
je 0x41acc6
mov eax, 0x41d8f8
call fcn.00402dd8
call fcn.00402774
push dword [0x41dad4]
push 0x41b138
push dword [0x41dacc]
push 0x41b154
mov eax, 0x41dae0
mov edx, 4
call fcn.0040463c
mov dl, 1
mov eax, dword [0x41009c]
call fcn.00403620
mov dword [0x41daf0], eax
lea eax, [ebp - 0x5c]
mov ecx, 0x41b160
mov edx, dword [0x41dadc]
call fcn.004045c8
mov edx, dword [ebp - 0x5c]
mov ecx, dword [0x41daf0]
mov eax, dword [0x41daec]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x41daf0]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x41b024
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x60]
mov edx, ebx
mov eax, dword [0x41daf0]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x60]
mov eax, 0x41dae4
mov edx, dword [0x41dae0]
call fcn.004045c8
lea eax, [ebp - 0x64]
mov ecx, 0x41b170
mov edx, dword [0x41dae4]
call fcn.004045c8
mov eax, dword [ebp - 0x64]
call fcn.004079bc
test al, al
je 0x41b01c
mov dword [0x41d8e8], 0xffffffff
mov dword [0x41d8f0], 0xffffffff
mov dword [0x41d8ec], 0xffffffff
mov dword [0x41d8f4], 0xffffffff
push 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x70]
mov edx, ebx
mov eax, dword [0x41daf0]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
mov ecx, 0x41b160
mov edx, dword [0x41dadc]
call fcn.004045c8
mov edx, dword [ebp - 0x74]
mov eax, dword [0x41daec]
pop ecx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x6c]
lea edx, [ebp - 0x68]
call fcn.00407438
mov edx, dword [ebp - 0x68]
mov eax, 0x41dacc
call fcn.00404310
cmp dword [0x41dacc], 0
je 0x41af53
mov edx, dword [0x41dacc]
mov eax, 0x41b070
call fcn.00404854
mov edi, eax
test edi, edi
jle 0x41af53
lea eax, [ebp - 0x78]
push eax
mov ecx, edi
dec ecx
mov edx, 1
mov eax, dword [0x41dacc]
call fcn.004047cc
mov eax, dword [ebp - 0x78]
call fcn.00407610
mov dword [0x41d8e8], eax
mov eax, 0x41dacc
mov ecx, edi
mov edx, 1
call fcn.0040480c
mov edx, dword [0x41dacc]
mov eax, 0x41b070
call fcn.00404854
mov edi, eax
test edi, edi
jle 0x41af53
lea eax, [ebp - 0x7c]
push eax
mov ecx, edi
dec ecx
mov edx, 1
mov eax, dword [0x41dacc]
call fcn.004047cc
mov eax, dword [ebp - 0x7c]
call fcn.00407610
mov dword [0x41d8f0], eax
mov eax, 0x41dacc
mov ecx, edi
mov edx, 1
call fcn.0040480c
mov edx, dword [0x41dacc]
mov eax, 0x41b070
call fcn.00404854
mov edi, eax
test edi, edi
jle 0x41af53
lea eax, [ebp - 0x80]
push eax
mov ecx, edi
dec ecx
mov edx, 1
mov eax, dword [0x41dacc]
call fcn.004047cc
mov eax, dword [ebp - 0x80]
call fcn.00407610
mov dword [0x41d8ec], eax
mov eax, 0x41dacc
mov ecx, edi
mov edx, 1
call fcn.0040480c
mov eax, dword [0x41dacc]
call fcn.00407610
mov dword [0x41d8f4], eax
cmp dword [0x41d8e8], 0
jle 0x41b01c
cmp dword [0x41d8f0], 0
jle 0x41b01c
cmp dword [0x41d8ec], 0
jle 0x41b01c
cmp dword [0x41d8f4], 0
jle 0x41b01c
mov dl, 1
mov eax, dword [0x4151ac]
call fcn.00418780
mov edi, eax
lea eax, [ebp - 0x84]
mov ecx, 0x41b170
mov edx, dword [0x41dae4]
call fcn.004045c8
mov edx, dword [ebp - 0x84]
mov eax, edi
mov ecx, dword [eax]
call dword [ecx + 0x4c]
cmp dword [0x41d8e4], 0
jle 0x41afe7
mov eax, dword [0x41d8ec]
push eax
mov eax, dword [0x41d8f4]
push eax
mov ax, word [0x41d8e4]
push eax
mov ecx, dword [0x41d8f0]
mov edx, dword [0x41d8e8]
mov eax, edi
call fcn.0041a5c4
push dword [0x41dae4]
push dword [0x41dae8]
push 0x41b170
lea eax, [ebp - 0x88]
mov edx, 3
call fcn.0040463c
mov edx, dword [ebp - 0x88]
mov eax, edi
mov ecx, dword [eax]
call dword [ecx + 0x50]
mov eax, edi
call fcn.00403650
inc ebx
dec esi
jne 0x41ad93
mov eax, dword [0x41daf0]
call fcn.00403650
mov eax, dword [0x41daec]
call fcn.00403650
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41b05d
lea eax, [ebp - 0x88]
mov edx, 0x1e
call fcn.004042e0
ret