Function at 0x413592
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
xor ebx, ebx
cmp byte [ebp + 0xc], bl
push esi
push edi
mov esi, 0x47f028
je 0x41361a
mov edi, 0x47f21c
mov ecx, esi
push edi
call fcn.00416e92
push edi
mov ecx, esi
call fcn.0041b21e
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041bd98
push 1
mov edi, 0x47f21c
push ebx
push 0x42cc6c
mov ecx, edi
call fcn.0041d1c1
push eax
push ebx
mov ecx, edi
call fcn.0041d67b
push eax
lea ecx, [ebp - 0xc]
call fcn.0041c87f
push 1
lea ecx, [ebp - 0xc]
call fcn.0041d704
push eax
push ebx
mov ecx, edi
call fcn.0041d704
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xc]
call fcn.0041c8e1
cmp byte [ebp + 8], bl
je 0x4137ab
mov edi, 0x47f210
mov ecx, esi
push edi
call fcn.00416e92
push edi
mov ecx, esi
call fcn.0041b21e
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041bd98
lea ecx, [ebp - 0x18]
call fcn.0041c7ab
lea ecx, [ebp - 0x24]
call fcn.0041c7ab
mov edi, 0x47f210
push ebx
mov ecx, edi
call fcn.0041c9c9
cmp al, 0x22
jne 0x4136a9
mov ecx, edi
call fcn.0041d704
inc eax
lea ecx, [ebp - 0xc]
push eax
call fcn.0041c81b
push 1
push ebx
push 0x42d1f8
lea ecx, [ebp - 0xc]
call fcn.0041d0b6
cmp eax, 0xffffffff
je 0x41369f
push eax
push ebx
lea ecx, [ebp - 0xc]
call fcn.0041d67b
push eax
lea ecx, [ebp - 0x18]
call fcn.0041c966
lea ecx, [ebp - 0xc]
call fcn.0041c8e1
jmp 0x4136b6
push 0x47f210
lea ecx, [ebp - 0x18]
call fcn.0041c966
cmp dword [ebp - 0x18], ebx
jbe 0x4136e6
push 1
push ebx
push 0x42cc6c
mov ecx, edi
call fcn.0041d1c1
cmp eax, 0xffffffff
je 0x4136e6
cmp eax, 1
jle 0x4136e6
push eax
push ebx
mov ecx, edi
call fcn.0041d67b
push eax
lea ecx, [ebp - 0x24]
call fcn.0041c966
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00425010
push 0x44
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.00425010
add esp, 0x18
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x84], 0x44
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041c7ab
push ebx
mov ecx, edi
call fcn.0041c9c9
cmp al, 0x22
jne 0x41373b
push 0x47f210
lea ecx, [ebp - 0x30]
call fcn.0041c966
jmp 0x413754
mov ecx, edi
call fcn.0041d704
push eax
lea eax, [ebp - 0x30]
push 0x42d1f0
push eax
call fcn.0041ce4d
add esp, 0xc
cmp dword [ebp - 0x24], ebx
jbe 0x413763
lea ecx, [ebp - 0x24]
call fcn.0041d704
jmp 0x413765
xor eax, eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x84]
push ecx
push eax
push ebx
push 0x4000000
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.0041d704
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x30]
call fcn.0041c8e1
lea ecx, [ebp - 0x24]
call fcn.0041c8e1
lea ecx, [ebp - 0x18]
call fcn.0041c8e1
cmp byte [ebp + 0x10], bl
je 0x413860
mov edi, 0x47f2f4
mov ecx, esi
push edi
call fcn.00416e92
push edi
mov ecx, esi
call fcn.0041b21e
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041bd98
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00425010
push 0x44
lea eax, [ebp - 0x84]
pop esi
push esi
push ebx
push eax
call fcn.00425010
add esp, 0x18
lea ecx, [ebp - 0xc]
mov dword [ebp - 0x84], esi
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041c7ab
mov ecx, 0x47f2f4
call fcn.0041d704
push eax
lea eax, [ebp - 0xc]
push 0x42d1f0
push eax
call fcn.0041ce4d
add esp, 0xc
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xc]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push ebx
push 0x4000000
push ebx
push ebx
push ebx
call fcn.0041d704
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xc]
call fcn.0041c8e1
pop edi
pop esi
pop ebx
leave
ret 0xc