Function at 0x412970
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x698
push esi
push 5
push 0
push 0
push ecx
push str.open
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, eax
cmp edx, 0x20
jg 0x412c94
mov ecx, 2
push edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], ecx
mov ecx, 0xd
mov esi, str.The_operating_system_is_out_of_memory_or_resources.
lea edi, [esp + 0x44]
mov eax, 3
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x10], eax
mov dword [esp + 0x3c], eax
mov ecx, 0xc
xor eax, eax
lea edi, [esp + 0x78]
mov esi, 0x42cf18
rep stosd dword es:[edi], eax
mov ecx, 8
lea edi, [esp + 0xa8]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x10
lea edi, [esp + 0xca]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 8
mov esi, 0x42cf3c
lea edi, [esp + 0x10c]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x10
lea edi, [esp + 0x12e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x10
mov esi, str.The_.EXE_file_is_invalid__non_Win32_.EXE_or_error_in_.EXE_image_.
lea edi, [esp + 0x170]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 8
lea edi, [esp + 0x1b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xe
mov esi, str.The_operating_system_denied_access_to_the_specified_file.
lea edi, [esp + 0x1d4]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0xa
lea edi, [esp + 0x20e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xc
mov esi, str.The_filename_association_is_incomplete_or_invalid.
lea edi, [esp + 0x238]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0xc
lea edi, [esp + 0x26b]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x18
mov esi, str.The_DDE_transaction_could_not_be_completed_because_other_DDE_transactions_were_being_processed.
lea edi, [esp + 0x29c]
mov dword [esp + 8], 0
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x14], 0xb
mov dword [esp + 0x18], 5
mov dword [esp + 0x1c], 0x1b
mov dword [esp + 0x20], 0x1e
mov dword [esp + 0x24], 0x1d
mov dword [esp + 0x28], 0x1c
mov dword [esp + 0x2c], 0x20
mov dword [esp + 0x34], 0x1f
mov dword [esp + 0x38], 8
mov dword [esp + 0x40], 0x1a
mov dword [esp + 0x2fc], 0
mov ecx, 7
mov esi, str.The_DDE_transaction_failed.
lea edi, [esp + 0x300]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x12
lea edi, [esp + 0x31c]
rep stosd dword es:[edi], eax
mov ecx, 0x12
mov esi, str.The_DDE_transaction_could_not_be_completed_because_the_request_timed_out.
lea edi, [esp + 0x364]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 6
lea edi, [esp + 0x3ae]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xc
mov esi, str.The_specified_dynamic_link_library_was_not_found.
lea edi, [esp + 0x3c8]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0xc
lea edi, [esp + 0x3fa]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 8
mov esi, str.The_specified_file_was_not_found.
lea edi, [esp + 0x42c]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x10
lea edi, [esp + 0x44e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x11
mov esi, str.There_is_no_application_associated_with_the_given_filename_extension.
lea edi, [esp + 0x490]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 7
lea edi, [esp + 0x4d6]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xd
mov esi, str.There_was_not_enough_memory_to_complete_the_operation.
lea edi, [esp + 0x4f4]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0xb
lea edi, [esp + 0x52b]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 8
mov esi, str.The_specified_path_was_not_found.
lea edi, [esp + 0x558]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x10
lea edi, [esp + 0x57a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 7
mov esi, str.A_sharing_violation_occurred.
lea edi, [esp + 0x5bc]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x11
lea edi, [esp + 0x5da]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
lea ecx, [esp + 8]
pop edi
cmp edx, dword [ecx]
je 0x412c58
inc eax
add ecx, 4
cmp eax, 0xf
jl 0x412c43
pop esi
add esp, 0x698
ret
lea eax, [eax + eax*4]
lea edx, [esp + 0x61c]
lea eax, [eax + eax*4]
lea ecx, [esp + eax*4 + 0x40]
push ecx
push str.Operation_failed.___s_
push edx
call fcn.004185fa
add esp, 0xc
lea eax, [esp + 0x61c]
push 0
push str.Error
push eax
call dword [sym.imp.USER32.dll_GetFocus]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
add esp, 0x698
ret