Function at 0x414da8
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
xor ebx, ebx
cmp byte [ebp + 0xc], bl
push esi
push edi
mov esi, 0x482408
je 0x414e30
mov edi, 0x48262c
mov ecx, esi
push edi
call fcn.00418e4f
push edi
mov ecx, esi
call fcn.0041d6f6
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041e39b
push 1
mov edi, 0x48262c
push ebx
push 0x42fb94
mov ecx, edi
call fcn.0041f9a1
push eax
push ebx
mov ecx, edi
call fcn.0041fe73
push eax
lea ecx, [ebp - 0xc]
call fcn.0041f009
push 1
lea ecx, [ebp - 0xc]
call fcn.0041ff07
push eax
push ebx
mov ecx, edi
call fcn.0041ff07
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xc]
call fcn.0041f06b
cmp byte [ebp + 8], bl
je 0x414fc2
mov edi, 0x482620
mov ecx, esi
push edi
call fcn.00418e4f
push edi
mov ecx, esi
call fcn.0041d6f6
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041e39b
lea ecx, [ebp - 0x18]
call fcn.0041ef35
lea ecx, [ebp - 0x24]
call fcn.0041ef35
push ebx
mov ecx, 0x482620
call fcn.0041f1a9
cmp al, 0x22
jne 0x414ec0
mov ecx, 0x482620
call fcn.0041ff07
inc eax
lea ecx, [ebp - 0xc]
push eax
call fcn.0041efa5
push 1
push ebx
push 0x4300f4
lea ecx, [ebp - 0xc]
call fcn.0041f896
cmp eax, 0xffffffff
je 0x414eb6
push eax
push ebx
lea ecx, [ebp - 0xc]
call fcn.0041fe73
push eax
lea ecx, [ebp - 0x18]
call fcn.0041f146
lea ecx, [ebp - 0xc]
call fcn.0041f06b
jmp 0x414ec9
push edi
lea ecx, [ebp - 0x18]
call fcn.0041f146
cmp dword [ebp - 0x18], ebx
jbe 0x414efb
push 1
push ebx
push 0x42fb94
lea ecx, [ebp - 0x18]
call fcn.0041f9a1
cmp eax, 0xffffffff
je 0x414efb
cmp eax, 1
jle 0x414efb
push eax
push ebx
lea ecx, [ebp - 0x18]
call fcn.0041fe73
push eax
lea ecx, [ebp - 0x24]
call fcn.0041f146
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00428300
push 0x44
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.00428300
add esp, 0x18
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x84], 0x44
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041ef35
push ebx
mov ecx, 0x482620
call fcn.0041f1a9
cmp al, 0x22
jne 0x414f4f
push edi
lea ecx, [ebp - 0x30]
call fcn.0041f146
jmp 0x414f6b
mov ecx, 0x482620
call fcn.0041ff07
push eax
lea eax, [ebp - 0x30]
push 0x4300ec
push eax
call fcn.0041f62d
add esp, 0xc
cmp dword [ebp - 0x24], ebx
jbe 0x414f7a
lea ecx, [ebp - 0x24]
call fcn.0041ff07
jmp 0x414f7c
xor eax, eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x84]
push ecx
push eax
push ebx
push 0x4000000
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.0041ff07
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x30]
call fcn.0041f06b
lea ecx, [ebp - 0x24]
call fcn.0041f06b
lea ecx, [ebp - 0x18]
call fcn.0041f06b
cmp byte [ebp + 0x10], bl
je 0x415077
mov edi, 0x482704
mov ecx, esi
push edi
call fcn.00418e4f
push edi
mov ecx, esi
call fcn.0041d6f6
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041e39b
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00428300
push 0x44
lea eax, [ebp - 0x84]
pop esi
push esi
push ebx
push eax
call fcn.00428300
add esp, 0x18
lea ecx, [ebp - 0xc]
mov dword [ebp - 0x84], esi
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041ef35
mov ecx, 0x482704
call fcn.0041ff07
push eax
lea eax, [ebp - 0xc]
push 0x4300ec
push eax
call fcn.0041f62d
add esp, 0xc
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xc]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push ebx
push 0x4000000
push ebx
push ebx
push ebx
call fcn.0041ff07
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xc]
call fcn.0041f06b
pop edi
pop esi
pop ebx
leave
ret 0xc