Function at 0x414da8
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
xor ebx, ebx
cmp byte [ebp + 0xc], bl
push esi
push edi
mov esi, 0x482408
je 0x414e30
mov edi, 0x48262c
mov ecx, esi
push edi
call fcn.00418e4f
push edi
mov ecx, esi
call fcn.0041d6f6
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041e39b
push 1
mov edi, 0x48262c
push ebx
push 0x42fb94
mov ecx, edi
call fcn.0041f999
push eax
push ebx
mov ecx, edi
call fcn.0041fe55
push eax
lea ecx, [ebp - 0xc]
call fcn.0041f001
push 1
lea ecx, [ebp - 0xc]
call fcn.0041fee9
push eax
push ebx
mov ecx, edi
call fcn.0041fee9
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xc]
call fcn.0041f063
cmp byte [ebp + 8], bl
je 0x414fc2
mov edi, 0x482620
mov ecx, esi
push edi
call fcn.00418e4f
push edi
mov ecx, esi
call fcn.0041d6f6
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041e39b
lea ecx, [ebp - 0x18]
call fcn.0041ef2d
lea ecx, [ebp - 0x24]
call fcn.0041ef2d
push ebx
mov ecx, 0x482620
call fcn.0041f1a1
cmp al, 0x22
jne 0x414ec0
mov ecx, 0x482620
call fcn.0041fee9
inc eax
lea ecx, [ebp - 0xc]
push eax
call fcn.0041ef9d
push 1
push ebx
push 0x4300f4
lea ecx, [ebp - 0xc]
call fcn.0041f88e
cmp eax, 0xffffffff
je 0x414eb6
push eax
push ebx
lea ecx, [ebp - 0xc]
call fcn.0041fe55
push eax
lea ecx, [ebp - 0x18]
call fcn.0041f13e
lea ecx, [ebp - 0xc]
call fcn.0041f063
jmp 0x414ec9
push edi
lea ecx, [ebp - 0x18]
call fcn.0041f13e
cmp dword [ebp - 0x18], ebx
jbe 0x414efb
push 1
push ebx
push 0x42fb94
lea ecx, [ebp - 0x18]
call fcn.0041f999
cmp eax, 0xffffffff
je 0x414efb
cmp eax, 1
jle 0x414efb
push eax
push ebx
lea ecx, [ebp - 0x18]
call fcn.0041fe55
push eax
lea ecx, [ebp - 0x24]
call fcn.0041f13e
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.004282e0
push 0x44
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.004282e0
add esp, 0x18
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x84], 0x44
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041ef2d
push ebx
mov ecx, 0x482620
call fcn.0041f1a1
cmp al, 0x22
jne 0x414f4f
push edi
lea ecx, [ebp - 0x30]
call fcn.0041f13e
jmp 0x414f6b
mov ecx, 0x482620
call fcn.0041fee9
push eax
lea eax, [ebp - 0x30]
push 0x4300ec
push eax
call fcn.0041f625
add esp, 0xc
cmp dword [ebp - 0x24], ebx
jbe 0x414f7a
lea ecx, [ebp - 0x24]
call fcn.0041fee9
jmp 0x414f7c
xor eax, eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x84]
push ecx
push eax
push ebx
push 0x4000000
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.0041fee9
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x30]
call fcn.0041f063
lea ecx, [ebp - 0x24]
call fcn.0041f063
lea ecx, [ebp - 0x18]
call fcn.0041f063
cmp byte [ebp + 0x10], bl
je 0x415077
mov edi, 0x482704
mov ecx, esi
push edi
call fcn.00418e4f
push edi
mov ecx, esi
call fcn.0041d6f6
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041e39b
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.004282e0
push 0x44
lea eax, [ebp - 0x84]
pop esi
push esi
push ebx
push eax
call fcn.004282e0
add esp, 0x18
lea ecx, [ebp - 0xc]
mov dword [ebp - 0x84], esi
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041ef2d
mov ecx, 0x482704
call fcn.0041fee9
push eax
lea eax, [ebp - 0xc]
push 0x4300ec
push eax
call fcn.0041f625
add esp, 0xc
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xc]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push ebx
push 0x4000000
push ebx
push ebx
push ebx
call fcn.0041fee9
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xc]
call fcn.0041f063
pop edi
pop esi
pop ebx
leave
ret 0xc