Function at 0x49d1a8
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x49d1b0
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x49d4fc
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebx + 0x237b4], 0
je 0x49d1e4
lea edx, [ebp - 4]
mov eax, dword [ebx + 0x237b4]
call fcn.00408b18
jmp 0x49d23b
call fcn.0042bc20
lea edx, [ebp - 0x1c]
call fcn.0042b840
mov eax, dword [ebx + 0x45c]
call fcn.00427890
call fcn.0042bc20
lea edx, [ebp - 0x20]
call fcn.0042b840
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 4]
call fcn.00408b18
call fcn.0042bc20
mov edx, dword [ebp - 0x1c]
call fcn.0042b8c0
mov eax, dword [ebx + 0x45c]
mov edx, dword [eax]
call dword [edx + 0xb8]
test eax, eax
jne 0x49d23b
lea eax, [ebp - 4]
call fcn.00403b00
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 4]
call fcn.00408b18
cmp dword [ebp - 0x24], 0
jne 0x49d259
lea eax, [ebp - 4]
mov edx, 0x49d514
call fcn.00403b98
lea eax, [ebp - 8]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00403f88
lea eax, [ebp - 0xc]
push eax
mov ecx, 4
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00403f88
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 8]
call fcn.0040897c
mov eax, dword [ebp - 0x28]
mov edx, 0x49d53c
call fcn.00403e90
jne 0x49d2c5
push 3
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00403f44
push eax
push 0
mov eax, dword [0x4a9a0c]
call fcn.00436c88
push eax
call sub.shell32.dll_ShellExecuteA
jmp 0x49d4d6
mov eax, dword [ebx + 0x418]
cmp byte [eax + 0x2c], 0
jne 0x49d32b
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 8]
call fcn.0040897c
mov eax, dword [ebp - 0x2c]
mov edx, 0x49d54c
call fcn.00403e90
je 0x49d305
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0xc]
call fcn.0040897c
mov eax, dword [ebp - 0x30]
mov edx, 0x49d55c
call fcn.00403e90
jne 0x49d32b
push 3
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00403f44
push eax
push 0
mov eax, dword [0x4a9a0c]
call fcn.00436c88
push eax
call sub.shell32.dll_ShellExecuteA
jmp 0x49d4d6
lea eax, [ebp - 0x18]
call fcn.00403b00
lea eax, [ebp - 0x18]
call fcn.00403b00
mov dl, 1
mov eax, dword [0x45fe40]
call fcn.0045ff40
mov esi, eax
mov edx, 0x80000000
mov eax, esi
call fcn.0045ffe0
xor ecx, ecx
mov edx, 0x49d56c
mov eax, esi
call fcn.00460044
test al, al
je 0x49d3b7
lea ecx, [ebp - 0x10]
xor edx, edx
mov eax, esi
call fcn.0046020c
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x10]
call fcn.0040897c
mov edx, dword [ebp - 0x34]
mov eax, 0x49d594
call fcn.0040406c
mov edi, eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [edi + 2]
mov edx, 2
mov eax, dword [ebp - 0x10]
call fcn.00403f88
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004090d4
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.004090a0
mov eax, esi
call fcn.0045ffb0
mov eax, esi
call fcn.00402e78
cmp dword [ebp - 0x18], 0
je 0x49d48b
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
call fcn.0040897c
mov eax, dword [ebp - 0x38]
mov edx, 0x49d54c
call fcn.00403e90
je 0x49d403
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0xc]
call fcn.0040897c
mov eax, dword [ebp - 0x3c]
mov edx, 0x49d55c
call fcn.00403e90
jne 0x49d43a
push 3
mov eax, dword [ebp - 0x14]
call fcn.00403f44
push eax
mov eax, dword [ebp - 4]
call fcn.00403f44
push eax
mov eax, dword [ebp - 0x18]
call fcn.00403f44
push eax
push 0x49d59c
mov eax, dword [0x4a9a0c]
call fcn.00436c88
push eax
call sub.shell32.dll_ShellExecuteA
jmp 0x49d4d6
lea ecx, [ebp - 0x40]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0049fc80
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 4]
mov edx, 0x49d5ac
call fcn.00403dcc
push 3
mov eax, dword [ebp - 0x14]
call fcn.00403f44
push eax
mov eax, dword [ebp - 4]
call fcn.00403f44
push eax
mov eax, dword [ebp - 0x18]
call fcn.00403f44
push eax
push 0x49d59c
mov eax, dword [0x4a9a0c]
call fcn.00436c88
push eax
call sub.shell32.dll_ShellExecuteA
jmp 0x49d4d6
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 8]
call fcn.0040897c
mov eax, dword [ebp - 0x44]
mov edx, 0x49d54c
call fcn.00403e90
je 0x49d4b5
lea eax, [ebp - 4]
mov ecx, dword [ebp - 4]
mov edx, 0x49d54c
call fcn.00403dcc
push 3
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00403f44
push eax
push 0
mov eax, dword [0x4a9a0c]
call fcn.00436c88
push eax
call sub.shell32.dll_ShellExecuteA
lea eax, [ebx + 0x237b4]
call fcn.00403b00
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49d503
lea eax, [ebp - 0x44]
mov edx, 0x11
call fcn.00403b24
ret