Function at 0x415f1b
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x470
and dword [ebp - 0x468], 0
and dword [ebp - 0x34c], 0
and dword [ebp - 0x350], 0
and dword [ebp - 0x244], 0
and dword [ebp - 0x240], 0
and dword [ebp - 0x470], 0
and dword [ebp - 0x134], 0
and dword [ebp - 0x130], 0
and dword [ebp - 0x46c], 0
and dword [ebp - 0x354], 0
and dword [ebp - 0x23c], 0
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x358], 1
and dword [ebp - 0x460], 0
cmp dword [0x4252b8], 0
je 0x415f9d
push 1
pop eax
jmp 0x4163c5
push 0x421c30
push dword [ebp + 0xc]
call fcn.00411e63
push 0
push 2
push dword [ebp + 8]
call fcn.00406fdc
mov dword [ebp - 0x468], eax
push 0
call fcn.0041de20
mov dword [ebp - 0x34c], eax
push 0
call fcn.0041de20
mov dword [ebp - 0x350], eax
push 1
pop eax
test eax, eax
je 0x4162f2
push dword [ebp - 0x34c]
call fcn.0041dee0
and dword [ebp - 0x34c], 0
push 0
call fcn.0041de20
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x464], 0
je 0x416053
and dword [ebp - 0x464], 0
push 1
push dword [ebp - 0x34c]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x354]
push eax
push 0x421c34
push dword [ebp + 0xc]
call fcn.00411eb4
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 1
jne 0x416051
push 1
pop eax
jmp 0x4163c5
jmp 0x416083
push 2
push dword [ebp - 0x34c]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x354]
push eax
push 0x421c38
push dword [ebp + 0xc]
call fcn.00411eb4
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0
jge 0x416094
push 0xffffffffffffffe6
pop eax
jmp 0x4163c5
push dword [ebp - 0x34c]
call fcn.0041dac0
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0
jne 0x4160c1
cmp dword [ebp - 0x46c], 1
jne 0x4160bc
jmp 0x4162f2
jmp 0x415fd6
push dword [ebp - 0x34c]
call fcn.0041db20
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jne 0x4160ee
cmp dword [ebp - 0x46c], 1
jne 0x4160e9
jmp 0x4162f2
jmp 0x415fd6
mov eax, dword [ebp - 0x240]
and eax, 0x20
test eax, eax
jne 0x416100
jmp 0x415fd6
push dword [ebp - 0x134]
push dword [ebp - 0x470]
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x41612a
push dword [ebp - 0x470]
call fcn.0040c670
test eax, eax
je 0x41612a
jmp 0x415fd6
push dword [ebp - 0x134]
call fcn.0040c670
test eax, eax
jne 0x41613e
jmp 0x415fd6
push 1
pop eax
test eax, eax
je 0x4162e2
mov eax, dword [ebp - 0x240]
and eax, 2
test eax, eax
je 0x416176
push 0
push 1
push 1
push 0xffffffffffffffff
push dword [ebp - 0x134]
call fcn.0040f772
mov dword [ebp - 0x244], eax
xor eax, eax
jmp 0x4163c5
push 0
push 0
push 1
push 0xffffffffffffffff
push dword [ebp - 0x134]
call fcn.0040f772
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jle 0x41619d
jmp 0x415fd6
cmp dword [ebp - 0x244], 0
jge 0x4161b8
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
jmp 0x415fd6
push dword [ebp - 0x134]
call fcn.00417cee
pop ecx
test eax, eax
je 0x4162cf
push dword [ebp - 0x134]
call fcn.0041712d
pop ecx
test eax, eax
je 0x4162cf
lea eax, [ebp - 0x348]
push eax
push dword [ebp - 0x134]
call fcn.00409458
push 0x421c3c
lea eax, [ebp - 0x348]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x416278
push 0
lea eax, [ebp - 0x45c]
push eax
call fcn.00408838
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x134]
call fcn.00408266
lea eax, [ebp - 0x238]
push eax
call fcn.00408802
push dword [ebp - 0x134]
push str.__s___UNREGSERVER
lea eax, [ebp - 0x348]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 1
lea eax, [ebp - 0x348]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp eax, 0x20
jae 0x41626a
and dword [ebp - 0x358], 0
lea eax, [ebp - 0x45c]
push eax
call fcn.00408802
jmp 0x416289
push dword [ebp - 0x134]
call fcn.004172da
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
jne 0x4162b1
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
push 0
push dword [ebp - 0x134]
push 0x3f8
call fcn.00407c8f
push dword [ebp - 0x134]
push dword [ebp - 0x350]
call fcn.0041db80
test eax, eax
jne 0x4162cd
xor eax, eax
jmp 0x4163c5
jmp 0x4162e2
push 0
push 1
push 1
push 0
push dword [ebp - 0x134]
call fcn.0040f772
cmp dword [ebp - 0x46c], 1
jne 0x4162ed
jmp 0x4162f2
jmp 0x415fd6
push 1
pop eax
test eax, eax
je 0x4163b5
push dword [ebp - 0x350]
call fcn.0041dac0
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x4163b5
push dword [ebp - 0x130]
call fcn.0040c266
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
and eax, 1
test eax, eax
je 0x416359
mov eax, dword [ebp - 0x460]
xor eax, 1
mov dword [ebp - 0x460], eax
push dword [ebp - 0x460]
push dword [ebp - 0x130]
call fcn.0040ab22
push 1
push dword [ebp - 0x130]
push dword [ebp + 8]
call fcn.004174d0
add esp, 0xc
test eax, eax
jne 0x41639f
push dword [ebp - 0x130]
call fcn.0040b363
cmp eax, 0xffffffff
jne 0x41639f
push 0
push dword [ebp - 0x130]
push 0x3f2
call fcn.00407c8f
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
push dword [ebp - 0x350]
call fcn.0041db20
mov dword [ebp - 0x130], eax
jmp 0x41630e
cmp dword [ebp - 0x23c], 0
jle 0x4163c2
xor eax, eax
jmp 0x4163c5
push 1
pop eax
leave
ret 8