Function at 0x41fbb0
Capabilities:
Execute command

Disassembly:
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x58]
cmp eax, edx
je 0x41fb51
mov dword [esp], eax
call fcn.0041f010
mov ebx, esi
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x70]
cmp eax, edx
je 0x41fb65
mov dword [esp], eax
call fcn.0041f010
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x88]
cmp eax, edx
je 0x41fb7d
mov dword [esp], eax
call fcn.0041f010
mov dword [esp], ebx
call fcn.0040ee60
mov eax, dword [ebp - 0x48]
cmp eax, ebx
je 0x41fb3f
mov dword [esp], eax
call fcn.0041f010
jmp 0x41fb3f
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x90]
push ecx
sub esp, 0xa8
mov eax, dword [ecx]
mov esi, dword [ecx + 4]
mov dword [ebp - 0x9c], eax
call fcn.0040bc50
mov eax, dword [esi]
mov ecx, ebx
mov dword [esp], eax
call fcn.004015c0
mov ecx, ebx
sub esp, 4
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x5c
call fcn.00418990
lea ecx, [ebp - 0x78]
sub esp, 8
mov edi, eax
mov dword [esp], 0x42206e
call fcn.004015c0
sub esp, 4
lea eax, [edi + 1]
lea ecx, [ebp - 0x30]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], ebx
call fcn.00418a00
mov eax, dword [ebp - 0x74]
sub esp, 0xc
lea ecx, [ebp - 0x30]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x78]
mov dword [esp], eax
call fcn.0041dc60
sub esp, 8
lea ecx, [ebp - 0x60]
lea edi, [ebp - 0x28]
mov dword [esp], eax
call fcn.0041e050
mov eax, dword [ebp - 0x30]
sub esp, 4
cmp eax, edi
je 0x41fc6e
mov dword [esp], eax
call fcn.0041f010
mov eax, dword [ebp - 0x5c]
lea ebx, [ebp - 0x40]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], ebx
add eax, 1
mov byte [ebp - 0x40], 0
mov dword [esp], eax
call fcn.0041dac0
sub esp, 4
cmp dword [ebp - 0x44], 0x3fffffff
je 0x41fe68
mov dword [esp + 4], 1
lea ecx, [ebp - 0x48]
mov dword [esp], 0x422092
call fcn.0041dc60
mov eax, dword [ebp - 0x5c]
sub esp, 8
lea ecx, [ebp - 0x48]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.0041dc60
sub esp, 8
lea ecx, [ebp - 0x48]
mov dword [esp], 0x422092
call fcn.0041cd20
sub esp, 4
lea ecx, [ebp - 0x30]
mov dword [esp], eax
call fcn.0041e050
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x60]
sub esp, 4
mov dword [esp], eax
call fcn.0041e7b0
mov eax, dword [ebp - 0x30]
sub esp, 4
cmp eax, edi
je 0x41fd12
mov dword [esp], eax
call fcn.0041f010
mov eax, dword [ebp - 0x48]
cmp eax, ebx
je 0x41fd21
mov dword [esp], eax
call fcn.0041f010
cmp dword [ebp - 0x9c], 1
jle 0x41fd8f
mov ebx, 1
nop
cmp dword [ebp - 0x5c], 0x3fffffff
je 0x41fe5c
mov dword [esp + 4], 1
lea ecx, [ebp - 0x60]
mov dword [esp], 0x422094
call fcn.0041dc60
mov edi, dword [esi + ebx*4]
sub esp, 8
mov dword [esp], edi
call sub.msvcrt.dll_strlen
mov ecx, 0x3fffffff
sub ecx, dword [ebp - 0x5c]
cmp eax, ecx
ja 0x41fe50
mov dword [esp + 4], eax
lea ecx, [ebp - 0x60]
mov dword [esp], edi
call fcn.0041dc60
sub esp, 8
add ebx, 1
cmp dword [ebp - 0x9c], ebx
jne 0x41fd30
mov dword [esp], str.___daemonized
lea ecx, [ebp - 0x60]
call fcn.0041cd20
sub esp, 4
lea esi, [esi]
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call sub.msvcrt.dll_system
cmp eax, 0x16
je 0x41fe11
cmp eax, 1
je 0x41fe0c
and eax, 0xfffffffd
jne 0x41fda8
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x58]
cmp eax, edx
je 0x41fdd4
mov dword [esp], eax
call fcn.0041f010
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x70]
cmp eax, edx
je 0x41fde6
mov dword [esp], eax
call fcn.0041f010
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x88]
cmp eax, edx
je 0x41fdfe
mov dword [esp], eax
call fcn.0041f010
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
cmp eax, 0x16
jne 0x41fdc2
mov dword [ebp - 0x30], 3
mov ebx, dword [sym.imp.msvcrt.dll__errno]
mov dword [ebp - 0x2c], 0
jmp 0x41fe37
call ebx
cmp dword [eax], 4
jne 0x41fdc2
lea eax, [ebp - 0x30]
mov dword [esp + 4], eax
mov dword [esp], eax
call fcn.004135f0
cmp eax, 0xffffffff
je 0x41fe30
jmp 0x41fdc2
mov dword [esp], 0x42207d
call fcn.00420148
mov dword [esp], 0x42207d
call fcn.00420148
mov dword [esp], 0x42207d
call fcn.00420148
mov esi, eax
jmp 0x41fb3f