Function at 0x4269a0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x495519
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x4e3ec8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
xor esi, esi
mov dword [ebp - 0x1c], esi
mov edi, dword [ebp + 8]
cmp edi, esi
je 0x426c73
mov eax, dword [edi + 0x54]
cmp eax, 6
je 0x426c73
cmp eax, 5
je 0x426c73
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov dword [ebp - 4], esi
call fcn.004122a0
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc100.dll_Ordinal_901]
push esi
push 0x4aed3c
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x14], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00478670
add esp, 4
cmp al, 1
jne 0x426c6a
push esi
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
mov ebx, dword [sym.imp.USER32.dll_FindWindowA]
push eax
call ebx
mov esi, eax
test esi, esi
je 0x426ab6
push 3
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
je 0x426c0a
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x426c0a
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x14]
push ecx
call fcn.00478550
add esp, 8
push 0x4ae26b
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call dword [sym.imp.mfc100.dll_Ordinal_2611]
test eax, eax
je 0x426bd2
mov edx, dword [ebp - 0x18]
cmp byte [edx + 0x17bad], 1
jne 0x426b15
push 3
push 0
push 0
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
xor edi, edi
jmp 0x426b20
mov eax, dword [ebp - 0x18]
cmp byte [eax + 0x17bad], 1
jne 0x426bfa
push 0
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call ebx
mov esi, eax
cmp edi, 0x14
jg 0x426b5b
test esi, esi
jne 0x426bfa
push 0x1f4
inc edi
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x426b20
push str.__could_not_be_opened.
push ecx
lea edx, [ebp - 0x10]
mov ecx, esp
mov dword [ebp + 8], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x18]
push eax
call fcn.00478550
push eax
lea ecx, [ebp - 0x1c]
push str.The_application__
push ecx
mov byte [ebp - 4], 5
call fcn.00401a70
add esp, 0x14
push eax
lea edx, [ebp + 8]
push edx
mov byte [ebp - 4], 6
call fcn.004019e0
add esp, 0xc
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call sub.mfc100.dll_Ordinal_1982
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_901]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov edi, dword [ebp + 8]
test esi, esi
je 0x426c45
lea eax, [ebp + 8]
push eax
mov ecx, edi
call fcn.00420a80
push 0x4ae26b
mov ecx, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1c], 1
call dword [sym.imp.mfc100.dll_Ordinal_2611]
test eax, eax
je 0x426c45
mov ecx, dword [ebp - 0x18]
cmp byte [ecx + 0x17bad], 1
jne 0x426c45
mov bl, 1
jmp 0x426c47
xor bl, bl
test byte [ebp - 0x1c], 1
mov dword [ebp - 4], 0
je 0x426c5d
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
test bl, bl
je 0x426c6a
mov ecx, dword [ebp - 0x18]
push edi
call fcn.00426860
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4