Function at 0x4c8f02
Capabilities:
Create process on windows

Disassembly:
enter 0x848, 2
push ebx
push ecx
push edx
mov dword [ebp - 4], eax
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x110]
call fcn.00401940
mov dword [ebp - 0xc], esp
lea edi, [ebp - 0x24c]
mov esi, 0x4e7bb1
push 0xa
call fcn.00401950
movzx eax, byte [ebp - 0x110]
movsx ebx, ax
test ebx, ebx
jle 0x4c8f8b
mov word [ebp - 0x250], bx
mov word [ebp - 0x234], 0
inc word [ebp - 0x234]
movsx eax, word [ebp - 0x234]
mov dword [ebp - 0x254], eax
movsx ebx, word [ebp - 0x234]
mov al, byte [ebp + ebx - 0x110]
push eax
call fcn.00415a80
mov ecx, dword [ebp - 0x254]
mov byte [ebp + ecx - 0x110], al
dec word [ebp - 0x250]
jne 0x4c8f4d
lea edi, [ebp - 0x118]
mov esi, 0x4e7bb2
push 4
call fcn.00401950
lea edi, [ebp - 0x228]
mov esi, 0x4e7bb3
call fcn.00401940
push 0x4e7bb4
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
ja 0x4c92a7
push 0x4e7bba
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
ja 0x4c92a7
push 0x4e7bbf
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
ja 0x4c92a7
push 0x4e7bc4
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
ja 0x4c92a7
lea eax, [ebp - 0x128]
push eax
movzx ebx, byte [ebp - 0x110]
add ebx, 5
push ebx
call fcn.00403b50
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4e7bc9
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
lea edi, [ebp - 0x228]
mov esi, 0x4e7bce
call fcn.00401940
cmp word [ebp - 0x230], 0
jle 0x4c90cf
movsx eax, word [ebp - 0x230]
push eax
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4e7bcf
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4e7bd4
push 4
call fcn.00401950
jmp 0x4c928b
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4e7bd8
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x4c915e
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4e7bde
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4e7be4
push 4
call fcn.00401950
jmp 0x4c928b
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4e7be9
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x4c91ed
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4e7bee
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4e7bf3
push 4
call fcn.00401950
jmp 0x4c928b
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4e7bf7
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x4c9279
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x4e7bfc
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x4e7c01
push 4
call fcn.00401950
jmp 0x4c928b
lea edi, [ebp - 0x118]
mov esi, 0x4e7c05
push 4
call fcn.00401950
lea eax, [ebp - 0x128]
push eax
movzx ebx, byte [ebp - 0x110]
add ebx, 5
push ebx
call fcn.00403320
jmp 0x4c9345
push 0x4e7c06
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
jbe 0x4c92d0
lea edi, [ebp - 0x118]
mov esi, 0x4e7c0b
push 4
call fcn.00401950
jmp 0x4c9334
push 0x4e7c0f
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
jbe 0x4c92f9
lea edi, [ebp - 0x118]
mov esi, 0x4e7c15
push 4
call fcn.00401950
jmp 0x4c9334
push 0x4e7c1a
lea eax, [ebp - 0x110]
push eax
call fcn.0040cca0
test eax, eax
jbe 0x4c9322
lea edi, [ebp - 0x118]
mov esi, 0x4e7c1f
push 4
call fcn.00401950
jmp 0x4c9334
lea edi, [ebp - 0x118]
mov esi, 0x4e7c23
push 4
call fcn.00401950
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x110]
call fcn.00401940
mov byte [ebp - 0x10], 0
lea esi, [ebp - 0x228]
mov edi, 0x4e7c27
call fcn.00415520
test al, al
je 0x4c967b
lea esi, [ebp - 0x118]
mov edi, 0x4e7c28
call fcn.00415520
test al, al
je 0x4c94d9
lea eax, [ebp - 0x24c]
push eax
call fcn.004158e0
lea ebx, [ebp - 0x128]
push ebx
push 0xff
call fcn.00403b50
push 0xa
lea eax, [ebp - 0x240]
mov byte [eax], 0
push eax
mov eax, dword [0x4e91ad]
push dword [eax + 0xaf5]
push 0xa
call fcn.004158b0
add esp, 8
push dword [ebp - 0x128]
mov esi, 0x4e90ad
lea edi, [ebp - 0x850]
call fcn.00401b30
mov esi, 0x4e7c2c
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x750]
call fcn.00401b30
lea esi, [ebp - 0x228]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x650]
call fcn.00401b30
mov esi, 0x4e7c39
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x550]
call fcn.00401b30
lea esi, [ebp - 0x24c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x450]
call fcn.00401b30
mov esi, 0x4e7c3c
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x350]
call fcn.00401b30
lea esi, [ebp - 0x240]
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x64
push 0x4e20
mov eax, dword [0x4e91ad]
call fcn.00415882
push 0
push dword [ebp - 0x128]
call sub.kernel32.dll_WinExec
mov word [ebp - 0x234], ax
lea ebx, [ebp - 0x128]
push ebx
push 0xff
call fcn.00403320
lea eax, [ebp - 0x124]
push eax
mov eax, dword [0x4e91ad]
call fcn.004146b2
cmp al, 0x2c
jne 0x4c948b
push 0x64
mov eax, dword [0x4e91ad]
call fcn.00415852
cmp word [ebp - 0x234], 0x1f
jle 0x4c94c9
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x24c]
call fcn.00401940
jmp 0x4c94d9
lea edi, [ebp - 0x228]
mov esi, 0x4e7c3e
call fcn.00401940
lea esi, [ebp - 0x228]
mov edi, 0x4e7c3f
call fcn.00415520
test al, al
je 0x4c967b
call fcn.004c9690
cmp word [ebp - 0x230], 0
jle 0x4c9619
push 2
lea eax, [ebp - 0x124]
push eax
movsx ebx, word [ebp - 0x230]
push ebx
call sub.kernel32.dll__lread
lea edi, [ebp - 0x120]
mov esi, 0x4e7c40
push 6
call fcn.00401950
movzx eax, word [ebp - 0x124]
push eax
call fcn.004157c0
movzx ebx, al
mov byte [ebp - 0x11f], bl
movzx eax, word [ebp - 0x124]
push eax
call fcn.004157b0
movzx ebx, al
mov byte [ebp - 0x11e], bl
lea esi, [ebp - 0x120]
mov edi, 0x4e7c43
call fcn.00415790
test al, al
je 0x4c95be
push dword [ebp + 0xc]
mov ax, word [ebp - 0x230]
push eax
mov eax, dword [ebp - 4]
call fcn.00415542
test al, al
je 0x4c9589
mov byte [ebp - 0x10], 1
jmp 0x4c95bc
movzx eax, byte [0x4e8cf7]
cmp ax, 0x54
jne 0x4c95a7
push 0x4e7c46
push 0x4e7c5a
call fcn.00414260
jmp 0x4c95bc
cmp ax, 0x45
jne 0x4c95bc
push 0x4e7c71
push 0x4e7c91
call fcn.00414260
jmp 0x4c960a
movzx eax, byte [0x4e8cf7]
cmp ax, 0x54
jne 0x4c95f5
push 0x4e7c92
mov esi, 0x4e7ca3
lea edi, [ebp - 0x350]
call fcn.00401b30
lea esi, [ebp - 0x120]
call fcn.00401af0
mov ebx, edi
push ebx
call fcn.00414260
jmp 0x4c960a
cmp ax, 0x45
jne 0x4c960a
push 0x4e7cc8
push 0x4e7cdb
call fcn.00414260
movsx eax, word [ebp - 0x230]
push eax
call sub.kernel32.dll__lclose
jmp 0x4c9650
movzx eax, byte [0x4e8cf7]
cmp ax, 0x54
jne 0x4c9639
push 0x4e7cdc
lea ebx, [ebp - 0x228]
push ebx
call fcn.00414260
jmp 0x4c9650
cmp ax, 0x45
jne 0x4c9650
push 0x4e7cf8
lea ebx, [ebp - 0x228]
push ebx
call fcn.00414260
lea esi, [ebp - 0x24c]
mov edi, 0x4e7d14
call fcn.00415520
test al, al
je 0x4c967b
push 0x4e9229
mov eax, esi
push eax
call fcn.00401e60
push 0x4e9229
call fcn.004154e0
mov al, byte [ebp - 0x10]
pop edx
pop ecx
pop ebx
leave
ret 8