Function at 0x4089e0
Capabilities:
Create process on windows

Disassembly:
push 0x80
mov eax, 0x4410fb
call fcn.00429926
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
xor ebx, ebx
lea eax, [ebp - 0x50]
push ebx
push eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x50], ebx
call fcn.00423772
pop ecx
pop ecx
test al, al
je 0x408b4c
lea ecx, [ebp - 0x48]
call fcn.00408032
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], ebx
call fcn.00408032
cmp dword [esi + 0x18], 8
mov byte [ebp - 4], 1
jb 0x408a33
mov esi, dword [esi + 4]
jmp 0x408a36
add esi, 4
lea eax, [ebp - 0x48]
push eax
push esi
call fcn.00425f89
cmp dword [edi + 0x18], 8
pop ecx
pop ecx
jb 0x408a4d
mov edi, dword [edi + 4]
jmp 0x408a50
add edi, 4
lea eax, [ebp - 0x2c]
push eax
push edi
call fcn.00425f89
push 0x3c
pop ebx
push ebx
xor edi, edi
lea eax, [ebp - 0x8c]
push edi
push eax
call fcn.004299e0
mov eax, dword [ebp - 0x44]
add esp, 0x14
push 0x10
pop esi
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], 0x400
cmp dword [ebp - 0x30], esi
jb 0x408a90
mov dword [ebp - 0x7c], eax
jmp 0x408a96
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x28]
cmp dword [ebp - 0x14], esi
jb 0x408aa3
mov dword [ebp - 0x78], ecx
jmp 0x408aa9
lea edx, [ebp - 0x28]
mov dword [ebp - 0x78], edx
xor ebx, ebx
inc ebx
mov dword [ebp - 0x70], ebx
cmp dword [ebp - 0x14], esi
jae 0x408ab7
lea ecx, [ebp - 0x28]
cmp dword [ebp - 0x30], esi
jae 0x408abf
lea eax, [ebp - 0x44]
push ecx
push eax
push 0x401548
push dword [0x44a13c]
call fcn.004082bd
mov ecx, dword [ebp - 0x4c]
lea eax, [ecx + 0x13c]
add esp, 0x10
cmp dword [eax + 0x18], esi
jb 0x408ae7
mov eax, dword [eax + 4]
jmp 0x408aea
add eax, 4
push 0x401538
push eax
call fcn.00408201
test al, al
je 0x408b00
or dword [ebp - 0x88], 0xc
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
jne 0x408b48
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push esi
push 0x40150c
push dword [0x44a13c]
call fcn.004082bd
add esp, 0xc
push edi
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00407cc4
push edi
push ebx
lea ecx, [ebp - 0x48]
call fcn.00407cc4
mov eax, esi
jmp 0x408c20
xor esi, esi
jmp 0x408b2d
push 0x3c
pop ebx
push ebx
lea eax, [ebp - 0x8c]
push 0
push eax
call fcn.004299e0
add esp, 0xc
cmp dword [esi + 0x18], 8
lea eax, [esi + 4]
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], 0x400
mov dword [ebp - 0x4c], eax
jb 0x408b84
mov ecx, dword [eax]
mov dword [ebp - 0x7c], ecx
jmp 0x408b87
mov dword [ebp - 0x7c], eax
cmp dword [edi + 0x18], 8
lea ebx, [edi + 4]
jb 0x408b97
mov ecx, dword [ebx]
mov dword [ebp - 0x78], ecx
jmp 0x408b9a
mov dword [ebp - 0x78], ebx
cmp dword [ebp - 0x50], 6
mov dword [ebp - 0x70], 1
jl 0x408bc7
cmp byte [ebp + 0x10], 0
je 0x408bc7
mov ecx, dword [0x44a13c]
push 0x4014e8
call fcn.00407c9e
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x80], 0x4014dc
cmp dword [edi + 0x18], 8
jb 0x408bcf
mov ebx, dword [ebx]
cmp dword [esi + 0x18], 8
jb 0x408bd7
mov eax, dword [eax]
push ebx
push eax
push 0x401488
push dword [0x44a13c]
call fcn.004088de
add esp, 0x10
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x408c1e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push esi
push 0x40150c
push dword [0x44a13c]
call fcn.004082bd
add esp, 0xc
jmp 0x408b41
xor eax, eax
call fcn.004299b8
ret 0xc