Function at 0x41f510
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x468ad3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x498
mov eax, dword [0x487cdc]
push ebx
push esi
push edi
mov dword [esp + 0x49c], eax
mov esi, ecx
call fcn.00462fcd
mov ecx, dword [eax + 4]
call fcn.0045cc76
xor ebx, ebx
push 1
mov ecx, esi
mov dword [esp + 0x4b0], ebx
call fcn.00459a9e
mov ecx, esi
call fcn.0041c6b0
call fcn.00407640
mov ecx, dword [esi + 0x2484]
mov edi, eax
mov eax, ecx
lea edx, [eax + 1]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
mov dword [esp + 0x10], edx
mov edi, edi
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41f590
sub eax, dword [esp + 0x10]
push eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.00403bf0
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x2c]
push eax
lea ecx, [edi + 0xf0]
mov byte [esp + 0x4b8], 1
call fcn.00403ac0
cmp dword [esp + 0x3c], 0x10
mov byte [esp + 0x4ac], bl
jb 0x41f5dc
mov ecx, dword [esp + 0x28]
push ecx
call fcn.0045ce75
add esp, 4
mov ecx, dword [esi + 0x2488]
mov eax, ecx
lea edx, [eax + 1]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
mov dword [esp + 0x10], edx
jmp 0x41f600
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41f600
sub eax, dword [esp + 0x10]
push eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.00403bf0
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x2c]
push eax
lea ecx, [edi + 0x10c]
mov byte [esp + 0x4b8], 2
call fcn.00403ac0
cmp dword [esp + 0x3c], 0x10
mov byte [esp + 0x4ac], bl
jb 0x41f64c
mov ecx, dword [esp + 0x28]
push ecx
call fcn.0045ce75
add esp, 4
mov ecx, dword [esi + 0x248c]
mov eax, ecx
lea edx, [eax + 1]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
mov dword [esp + 0x10], edx
jmp 0x41f670
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41f670
sub eax, dword [esp + 0x10]
push eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.00403bf0
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x2c]
push eax
lea ecx, [edi + 0x128]
mov byte [esp + 0x4b8], 3
call fcn.00403ac0
cmp dword [esp + 0x3c], 0x10
mov byte [esp + 0x4ac], bl
jb 0x41f6bc
mov ecx, dword [esp + 0x28]
push ecx
call fcn.0045ce75
add esp, 4
mov eax, dword [esi + 0x2494]
mov ecx, edi
mov dword [edi + 0x144], eax
call fcn.00405270
call fcn.0045ced0
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0x4ac], 4
call fcn.0045ced0
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0x4ac], 5
call fcn.0045ced0
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0x4ac], 6
call fcn.0045ced0
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x20], eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esi + 0x28c]
mov byte [esp + 0x4b0], 7
call fcn.0045acd0
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esi + 0x41c]
call fcn.0045acd0
lea edx, [esp + 0x14]
push edx
lea ecx, [esi + 0x46c]
call fcn.0045acd0
mov eax, dword [esp + 0x1c]
push eax
push str._APMXE_
lea ecx, [esp + 0x20]
call fcn.00403450
mov ecx, dword [esp + 0x1c]
push ecx
push str._APMXE_
lea ecx, [esp + 0x1c]
call fcn.00403450
mov edx, dword [esp + 0x14]
xor eax, eax
mov byte [esp + 0x98], bl
mov ecx, 0xff
lea edi, [esp + 0x99]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
stosb byte es:[edi], al
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x28]
push str.__s___s
push ecx
call fcn.0042f210
mov edx, dword [esp + 0x30]
add esp, 0x10
push edx
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 0x11
xor eax, eax
lea edi, [esp + 0x50]
rep stosd dword es:[edi], eax
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x54]
push eax
push ebx
push ebx
xor ecx, ecx
push 0x8000000
mov dword [esp + 0x54], ecx
push ebx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], ecx
push ebx
mov dword [esp + 0x68], ecx
push ebx
lea ecx, [esp + 0xb8]
push ecx
push ebx
mov dword [esp + 0x78], 0x44
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp eax, ebx
je 0x41f968
mov edx, dword [esp + 0x40]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edx
call edi
mov eax, dword [esp + 0x44]
push eax
call edi
push ebx
lea ecx, [esi + 0xcdc]
call fcn.0045c3ad
push 1
lea ecx, [esi + 0x109c]
call fcn.0045c3ad
push ebx
lea ecx, [esi + 0x2498]
call fcn.0045c3ad
push 0x46fa3c
push 0x40b
mov ecx, esi
call fcn.0045c21e
mov ecx, eax
call fcn.0045c2f7
push ebx
push 0x40d
mov ecx, esi
call fcn.0045c21e
mov ecx, eax
call fcn.0045c371
mov ecx, esi
call fcn.0041e430
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x4ac], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f8be
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x4ac], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f8e4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x4ac], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f90a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x4ac], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f92f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov dword [esp + 0x4ac], 0xffffffff
call fcn.00462fcd
mov ecx, dword [eax + 4]
call fcn.0045cc8b
mov ecx, dword [esp + 0x4a4]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x49c]
call fcn.00446654
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.0045ced0
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push eax
push ecx
lea edx, [esp + 0x18]
push 0x471338
push edx
mov byte [esp + 0x4bc], 8
call fcn.0042f210
mov edi, dword [esp + 0x20]
push edi
push str._s_r_n
push ebx
call fcn.00430ba0
push 0x836
push str..GMWebDlg.cpp
push 2
push 0xc353
call fcn.004310d0
mov eax, dword [esi + 0x2494]
add esp, 0x2c
push eax
mov ecx, esi
call fcn.00419450
test eax, eax
mov ecx, esi
jne 0x41f9f3
push 0x470c28
push 0x40b
call fcn.0045c21e
mov ecx, eax
call fcn.0045c2f7
push 5
jmp 0x41fa0a
push 0x46fa3c
push 0x40b
call fcn.0045c21e
mov ecx, eax
call fcn.0045c2f7
push ebx
mov ecx, esi
push 0x40d
call fcn.0045c21e
mov ecx, eax
call fcn.0045c371
lea eax, [edi - 0x10]
mov byte [esp + 0x4ac], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f898
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
jmp 0x41f898