Function at 0x4145c1
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push 0x74063d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x4145f9
push 0x740619
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
jmp 0x414bdf
push 0x740635
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x41461b
call fcn.00414c48
jmp 0x414bdf
push 0x740639
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x4146c3
push 1
push 1
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
mov dword [0x740671], 1
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x420a62
push 0x514
push 1
push dword [0x74061d]
push 0x740675
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x208]
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4146a5
push ebx
call fcn.0047cbd4
add esp, 4
push 1
push 0
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
jmp 0x414bdf
push 0x740645
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x4147bd
mov ebx, dword [0x740599]
mov dword [ebp - 4], ebx
push 0x4b583b
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004031d4
add esp, 8
cmp eax, 0
je 0x4147b8
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov eax, 0x4b59d6
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.0040665c
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41472f
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [0x740599]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push dword [ebp - 0x10]
call fcn.0040665c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
push 1
push 0
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x41476b
add eax, 8
push eax
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x414776
add eax, 8
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
nop
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x414798
push 6
call fcn.0047cbda
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4147a8
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4147b8
push ebx
call fcn.0047cbd4
add esp, 4
jmp 0x414bdf
push 0x740649
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x414860
push 1
push 1
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
push 0x10
mov eax, 0x4b5949
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
mov eax, 0x737bd8
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 1
push dword [0x74061d]
push 0x740591
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x414832
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x414842
push ebx
call fcn.0047cbd4
add esp, 4
push 1
push 0
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
jmp 0x414bdf
push 0x74064d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x414908
push 1
push 1
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
mov dword [0x740671], 2
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x420a62
push 0x514
push 1
push dword [0x74061d]
push 0x740675
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x208]
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4148ea
push ebx
call fcn.0047cbd4
add esp, 4
push 1
push 0
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
jmp 0x414bdf
push 0x740651
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x4149b0
push 1
push 1
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
mov dword [0x740671], 3
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x420a62
push 0x514
push 1
push dword [0x74061d]
push 0x740675
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x208]
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x414992
push ebx
call fcn.0047cbd4
add esp, 4
push 1
push 0
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
jmp 0x414bdf
push 0x740655
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x414a58
push 1
push 1
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
mov dword [0x740671], 4
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x420a62
push 0x514
push 1
push dword [0x74061d]
push 0x740675
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x208]
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x414a3a
push ebx
call fcn.0047cbd4
add esp, 4
push 1
push 0
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
jmp 0x414bdf
push 0x740659
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x414b00
push 1
push 1
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
mov dword [0x740671], 5
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x420a62
push 0x514
push 1
push dword [0x74061d]
push 0x740675
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x208]
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x414ae2
push ebx
call fcn.0047cbd4
add esp, 4
push 1
push 0
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
jmp 0x414bdf
push 0x74065d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
jne 0x414b9e
push 1
push 1
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x422f32
push 0x578
push 1
push dword [0x74061d]
push 0x740679
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x208]
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x414b80
push ebx
call fcn.0047cbd4
add esp, 4
push 1
push 0
push 0x74066d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xe8]
jmp 0x414bdf
push 0x740661
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
je 0x414bd2
push 0x740665
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 8], eax
je 0x414bd2
xor eax, eax
jmp 0x414bd7
mov eax, 1
test eax, eax
je 0x414bdf
mov esp, ebp
pop ebp
ret 0x10