Function at 0x49d510
Capabilities:
Create process on windows

Disassembly:
mov eax, dword [0x63709c]
sub esp, 0xbbc
push edi
xor edi, edi
cmp eax, edi
je 0x49dbaa
push ebx
push ebp
mov ebp, dword [esp + 0xbcc]
push esi
cmp eax, ebp
je 0x49d549
mov eax, dword [eax + 0x4bc]
cmp eax, edi
jne 0x49d530
pop esi
pop ebp
pop ebx
pop edi
add esp, 0xbbc
ret
cmp dword [ebp + 0x488], edi
jne 0x49dba7
mov ebx, 1
push edi
mov dword [ebp + 0x488], ebx
call fcn.005cce76
mov ecx, dword [ebp + 0x490]
add esp, 4
cmp eax, ecx
mov dword [ebp + 0x494], eax
jne 0x49d580
inc ecx
mov dword [ebp + 0x494], ecx
cmp dword [ebp + 0x440], 4
jne 0x49d5ad
mov eax, dword [ebp + 0x464]
cmp eax, edi
je 0x49d59b
cmp dword [ebp + 0x458], eax
jb 0x49d5ad
mov dword [ebp + 0x440], 9
mov dword [ebp + 0x448], ebx
jmp 0x49d5b3
mov dword [ebp + 0x44c], ebx
mov eax, dword [esp + 0xbd8]
cmp byte [eax], 0
je 0x49d5cd
push eax
push ebx
push ebx
push ebx
push ebx
push ebp
call fcn.00568380
add esp, 0x18
mov eax, dword [ebp]
or esi, 0xffffffff
push eax
mov dword [ebp + 0x478], esi
call fcn.005827d0
push eax
call fcn.005562e0
push ebp
call fcn.0049cb00
mov ecx, dword [ebp]
add esp, 0xc
push edi
push ecx
call fcn.005827d0
add esp, 4
push eax
call fcn.00565f80
mov eax, dword [ebp + 0x448]
add esp, 8
cmp eax, edi
mov byte [esp + 0x3fc], 0
mov byte [esp + 0x7e4], 0
je 0x49d76e
cmp dword [ebp + 0x464], edi
jbe 0x49d658
mov ecx, dword [ebp + 0x494]
sub ecx, dword [ebp + 0x490]
cmp ecx, ebx
jae 0x49d63c
mov ecx, ebx
mov edx, dword [ebp + 0x468]
mov eax, dword [ebp + 0x458]
cmp edx, eax
ja 0x49d64e
sub eax, edx
xor edx, edx
div ecx
mov dword [ebp + 0x46c], eax
mov eax, dword [ebp + 0x43c]
cmp eax, esi
je 0x49d669
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 0x43c], esi
cmp dword [0x63fb90], edi
mov dword [esp + 0x10], edi
je 0x49d6a5
lea edx, [esp + 0x10]
push edx
push ebx
push 0x19
push str.FILERCVD
push ebp
call fcn.0049ccd0
push ebp
mov edx, eax
call fcn.0049c8e0
add esp, 0x18
test eax, eax
je 0x49dba7
cmp edx, edi
je 0x49d703
push ebp
call fcn.0049ca70
mov eax, dword [0x6081e4]
add esp, 4
cmp eax, edi
je 0x49d6d7
push edi
call fcn.00414770
add esp, 4
test eax, eax
je 0x49d6d7
mov eax, dword [ebp + 0x4b8]
push ebp
push eax
push 0x1e
push edi
call fcn.00417150
add esp, 0x10
cmp dword [0x6446f0], edi
je 0x49d703
push edi
call fcn.0056cf70
add esp, 4
test eax, eax
je 0x49d703
mov ecx, dword [ebp]
mov edx, dword [ebp + 0x4b8]
push ecx
push ebp
push edx
push 0x1e
push edi
call fcn.0056d820
add esp, 0x14
cmp dword [0x63fb90], edi
je 0x49d72f
lea eax, [esp + 0x10]
push eax
push edi
push 0x19
push str.FILERCVD
push ebp
call fcn.0049ccd0
push ebp
call fcn.0049c8e0
add esp, 0x18
test eax, eax
je 0x49dba7
push edi
push ebx
lea ecx, [esp + 0x404]
push ecx
lea esi, [ebp + 0x234]
push esi
call fcn.0048b9a0
push esi
lea edi, [ebp + 0x130]
push edi
lea edx, [esp + 0x7fc]
push 0x5e6a64
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
push edi
call fcn.004f05d0
add esp, 0x24
jmp 0x49d845
mov eax, dword [ebp + 0x43c]
cmp eax, esi
je 0x49d77f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 0x43c], esi
cmp dword [0x63fb90], edi
mov dword [esp + 0x10], edi
je 0x49d7bb
lea eax, [esp + 0x10]
push eax
push ebx
push 0x1b
push str.GETFAIL
push ebp
call fcn.0049ccd0
push ebp
mov edx, eax
call fcn.0049c8e0
add esp, 0x18
test eax, eax
je 0x49dba7
cmp edx, edi
je 0x49d819
push ebp
call fcn.0049ca70
mov eax, dword [0x6081e4]
add esp, 4
cmp eax, edi
je 0x49d7ed
push edi
call fcn.00414770
add esp, 4
test eax, eax
je 0x49d7ed
mov ecx, dword [ebp + 0x4b8]
push ebp
push ecx
push 0x1d
push edi
call fcn.00417150
add esp, 0x10
cmp dword [0x6446f0], edi
je 0x49d819
push edi
call fcn.0056cf70
add esp, 4
test eax, eax
je 0x49d819
mov edx, dword [ebp]
mov eax, dword [ebp + 0x4b8]
push edx
push ebp
push eax
push 0x1d
push edi
call fcn.0056d820
add esp, 0x14
cmp dword [0x63fb90], edi
je 0x49d845
lea ecx, [esp + 0x10]
push ecx
push edi
push 0x1b
push str.GETFAIL
push ebp
call fcn.0049ccd0
push ebp
call fcn.0049c8e0
add esp, 0x18
test eax, eax
je 0x49dba7
mov edx, dword [ebp + 0x4b8]
mov ebx, dword [ebp]
push edx
call fcn.00502a60
add esp, 4
test eax, eax
je 0x49d863
mov eax, dword [ebp + 0x4b8]
mov ebx, dword [eax]
mov eax, dword [ebp + 0x448]
test eax, eax
lea ecx, [ebp + 4]
push ecx
lea edx, [ebp + 0x234]
push edx
push 0
je 0x49da27
push 0xb6b
call fcn.00421db0
add esp, 8
push eax
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea edi, [esp + 0x24]
add esp, 0x10
dec edi
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49d8a0
mov cx, word [0x5e6ca0]
mov dl, byte [0x5e6ca2]
mov word [edi], cx
mov ecx, dword [ebp + 0x490]
test ecx, ecx
mov byte [edi + 2], dl
jle 0x49d931
mov eax, dword [ebp + 0x494]
sub eax, ecx
cmp eax, 1
jae 0x49d8d7
mov eax, 1
push 1
push eax
push 0x5e6c98
call fcn.0055ac10
add esp, 0xc
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49d8f0
lea edi, [esp + 0x14]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x49d900
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x14]
dec edi
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49d920
mov ax, word [0x5e7420]
mov word [edi], ax
lea eax, [esp + 0x14]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49d938
fild dword [ebp + 0x46c]
push 1
push 1
push 0
sub eax, edx
mov edx, dword [ebp + 0x46c]
test edx, edx
push 1
push 1
lea ecx, [esp + eax + 0x28]
push ecx
jge 0x49d966
fadd qword [0x5e73f0]
sub esp, 8
fstp qword [esp]
call fcn.00516dc0
lea edi, [esp + 0x34]
add esp, 0x20
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49d980
mov eax, dword [0x5eac80]
mov cl, byte [0x5eac84]
mov dword [edi], eax
mov byte [edi + 4], cl
lea edi, [esp + 0x14]
dec edi
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49d9a0
mov dx, word [0x5e6c9c]
mov word [edi], dx
mov eax, dword [0x61369c]
push eax
push ebx
call fcn.00526700
mov ecx, dword [0x613698]
push ecx
lea edx, [esp + 0x20]
push edx
xor edi, edi
push ebx
mov dword [0x63f7ac], edi
mov dword [0x63f7bc], 1
call fcn.00526870
mov eax, dword [0x61369c]
push eax
push ebx
call fcn.00526700
mov esi, dword [ebp + 0x4b8]
push esi
call fcn.00502a60
add esp, 0x20
test eax, eax
je 0x49da03
mov ebx, dword [esi]
cmp dword [esp + 0xbd4], edi
jne 0x49da83
cmp dword [ebp + 0x48c], edi
je 0x49da83
mov ecx, dword [ebp]
push edi
push edi
push 0x10
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x49dad8
mov eax, dword [ebp + 0x440]
cmp eax, 5
jne 0x49da53
push 0x1008
call fcn.00421db0
add esp, 8
push eax
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x49d9b2
cmp eax, 4
jne 0x49da62
push 0xb68
jmp 0x49d883
push 0xb69
call fcn.00421db0
add esp, 8
push eax
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x49d9b2
cmp dword [ebp + 0x448], edi
push edi
je 0x49da93
push 0xb6a
jmp 0x49dab6
mov eax, dword [ebp + 0x440]
cmp eax, 4
jne 0x49daa5
push 0xb67
jmp 0x49dab6
cmp eax, 5
jne 0x49dab1
push 0x1009
jmp 0x49dab6
push 0xb60
call fcn.00421db0
add esp, 8
push eax
push 1
push 1
push 1
push 1
push ebp
call fcn.00568380
push 1
push ebp
call fcn.0049cd40
add esp, 0x20
push ebp
call fcn.0049c8e0
add esp, 4
test eax, eax
je 0x49daee
mov ebx, dword [ebp]
mov esi, dword [ebp + 0x4b8]
mov al, byte [esp + 0x3fc]
test al, al
je 0x49dba7
cmp al, 0x2f
je 0x49db89
cmp al, byte [0x609e0c]
je 0x49db89
mov ecx, dword [0x645324]
push 5
push 0x637bf8
lea edx, [esp + 0x7ec]
push edx
lea eax, [esp + 0x408]
push eax
push edi
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
ja 0x49dba7
lea edx, [esp + 0x3fc]
push edx
push edi
push 0xb6c
mov dword [0x63f7ac], edi
mov dword [0x63f7bc], 1
call fcn.00421db0
add esp, 8
push eax
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [0x61369c]
push ecx
lea edx, [esp + 0x24]
push edx
push ebx
call fcn.005275f0
add esp, 0x18
pop esi
pop ebp
pop ebx
pop edi
add esp, 0xbbc
ret
push esi
push edi
push edi
push 1
lea eax, [esp + 0x7f4]
push eax
lea ecx, [esp + 0x410]
push ecx
push ebx
call fcn.00447670
add esp, 0x1c
pop esi
pop ebp
pop ebx
pop edi
add esp, 0xbbc
ret