Function at 0x413ae4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
xor ebx, ebx
cmp byte [ebp + 0xc], bl
push esi
push edi
mov esi, 0x47f0a8
je 0x413b6c
mov edi, 0x47f29c
mov ecx, esi
push edi
call fcn.00417516
push edi
mov ecx, esi
call fcn.0041b9e6
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041c560
push 1
mov edi, 0x47f29c
push ebx
push 0x42cc78
mov ecx, edi
call fcn.0041d974
push eax
push ebx
mov ecx, edi
call fcn.0041de43
push eax
lea ecx, [ebp - 0xc]
call fcn.0041d047
push 1
lea ecx, [ebp - 0xc]
call fcn.0041decc
push eax
push ebx
mov ecx, edi
call fcn.0041decc
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xc]
call fcn.0041d0a9
cmp byte [ebp + 8], bl
je 0x413cfe
mov edi, 0x47f290
mov ecx, esi
push edi
call fcn.00417516
push edi
mov ecx, esi
call fcn.0041b9e6
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041c560
lea ecx, [ebp - 0x18]
call fcn.0041cf73
lea ecx, [ebp - 0x24]
call fcn.0041cf73
push ebx
mov ecx, 0x47f290
call fcn.0041da75
cmp al, 0x22
jne 0x413bfc
mov ecx, 0x47f290
call fcn.0041decc
inc eax
lea ecx, [ebp - 0xc]
push eax
call fcn.0041cfe3
push 1
push ebx
push 0x42d148
lea ecx, [ebp - 0xc]
call fcn.0041d869
cmp eax, 0xffffffff
je 0x413bf2
push eax
push ebx
lea ecx, [ebp - 0xc]
call fcn.0041de43
push eax
lea ecx, [ebp - 0x18]
call fcn.0041d12e
lea ecx, [ebp - 0xc]
call fcn.0041d0a9
jmp 0x413c05
push edi
lea ecx, [ebp - 0x18]
call fcn.0041d12e
cmp dword [ebp - 0x18], ebx
jbe 0x413c37
push 1
push ebx
push 0x42cc78
lea ecx, [ebp - 0x18]
call fcn.0041d974
cmp eax, 0xffffffff
je 0x413c37
cmp eax, 1
jle 0x413c37
push eax
push ebx
lea ecx, [ebp - 0x18]
call fcn.0041de43
push eax
lea ecx, [ebp - 0x24]
call fcn.0041d12e
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00425890
push 0x44
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.00425890
add esp, 0x18
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x84], 0x44
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041cf73
push ebx
mov ecx, 0x47f290
call fcn.0041da75
cmp al, 0x22
jne 0x413c8b
push edi
lea ecx, [ebp - 0x30]
call fcn.0041d12e
jmp 0x413ca7
mov ecx, 0x47f290
call fcn.0041decc
push eax
lea eax, [ebp - 0x30]
push 0x42d140
push eax
call fcn.0041d600
add esp, 0xc
cmp dword [ebp - 0x24], ebx
jbe 0x413cb6
lea ecx, [ebp - 0x24]
call fcn.0041decc
jmp 0x413cb8
xor eax, eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x84]
push ecx
push eax
push ebx
push 0x4000000
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.0041decc
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x30]
call fcn.0041d0a9
lea ecx, [ebp - 0x24]
call fcn.0041d0a9
lea ecx, [ebp - 0x18]
call fcn.0041d0a9
cmp byte [ebp + 0x10], bl
je 0x413db3
mov edi, 0x47f374
mov ecx, esi
push edi
call fcn.00417516
push edi
mov ecx, esi
call fcn.0041b9e6
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041c560
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00425890
push 0x44
lea eax, [ebp - 0x84]
pop esi
push esi
push ebx
push eax
call fcn.00425890
add esp, 0x18
lea ecx, [ebp - 0xc]
mov dword [ebp - 0x84], esi
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041cf73
mov ecx, 0x47f374
call fcn.0041decc
push eax
lea eax, [ebp - 0xc]
push 0x42d140
push eax
call fcn.0041d600
add esp, 0xc
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xc]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push ebx
push 0x4000000
push ebx
push ebx
push ebx
call fcn.0041decc
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xc]
call fcn.0041d0a9
pop edi
pop esi
pop ebx
leave
ret 0xc