Function at 0x41246c
Capabilities:
Create process on windows

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esi + 8], eax
cmp byte [0x47f27c], bl
je 0x4124f3
call fcn.004237b5
call fcn.00423832
call fcn.004238f0
call fcn.00423920
call fcn.00423950
call fcn.00423980
call fcn.00423a3d
call fcn.00423c00
call fcn.00423d1a
call fcn.00423e34
call fcn.00423ef2
mov ecx, 0x47dfb8
call fcn.0041938d
cmp byte [0x47f27c], bl
je 0x4124f3
mov eax, dword [0x47e654]
cmp eax, dword [0x47e64c]
jb 0x4124f3
ja 0x41257b
mov eax, dword [0x47e650]
cmp eax, dword [0x47e648]
ja 0x41257b
push 3
pop edi
cmp dword [0x47e338], edi
jbe 0x412515
push ebx
mov ecx, 0x47e338
call fcn.0041cd1e
push eax
call fcn.0040dc10
pop ecx
test al, al
pop ecx
je 0x41257b
mov ecx, 0x47dfb8
call fcn.0041a69c
push ebx
push ebx
mov ecx, esi
mov dword [0x47e658], 1
call fcn.00414c1b
mov ecx, esi
call fcn.00411df7
test al, al
je 0x41257b
push 2
pop eax
test byte [0x47e18c], al
je 0x412558
mov ecx, esi
mov dword [0x47e658], eax
call fcn.004105ca
test al, al
je 0x41257b
test byte [0x47e18c], 4
je 0x412582
push ebx
push ebx
mov ecx, esi
mov dword [0x47e658], edi
call fcn.00414c1b
mov ecx, esi
call fcn.004102f6
test al, al
jne 0x412582
xor al, al
jmp 0x412853
cmp byte [0x47f27c], bl
mov edi, dword [sym.imp.USER32.dll_SetWindowTextA]
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [0x47e658], 4
jne 0x4125b5
mov ecx, 0x47eed0
call fcn.0041cd1e
push eax
push 0x14
push dword [esi + 8]
call ebp
push eax
call edi
push ebx
push ebx
mov ecx, 0x47e880
call fcn.00414c1b
push ebx
push ebx
mov ecx, esi
call fcn.00414c1b
lea ecx, [esp + 0x1c]
mov byte [0x47e819], 1
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
call fcn.0041bdc5
mov dword [esp + 0x2c], 0x47e380
mov eax, dword [esp + 0x2c]
sub esp, 0xc
mov ecx, esp
mov eax, dword [eax]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x28]
push eax
call fcn.0041be99
lea eax, [esp + 0x20]
mov ecx, esi
push eax
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x40]
push dword [esp + 0x30]
call fcn.00413399
add dword [esp + 0x2c], 0x44
cmp dword [esp + 0x2c], 0x47e490
jl 0x4125ea
cmp dword [esp + 0x10], ebx
jle 0x41264f
push ebx
mov ecx, 0x47eedc
call fcn.0041cd1e
push eax
mov ecx, 0x47dfb8
push dword [esi + 8]
call fcn.0041b2a8
jmp 0x412848
cmp byte [0x47f27c], bl
mov dword [0x47e658], 5
jne 0x412676
mov ecx, 0x47eee8
call fcn.0041cd1e
push eax
push 0x14
push dword [esi + 8]
call ebp
push eax
call edi
push ebx
push ebx
mov ecx, esi
call fcn.00414c1b
mov ecx, esi
call fcn.00413211
test al, al
jne 0x4126a3
push ebx
mov ecx, 0x47eef4
call fcn.0041cd1e
push eax
mov ecx, 0x47dfb8
push dword [esi + 8]
call fcn.0041b2a8
cmp byte [0x47f27c], bl
mov dword [0x47e658], 6
jne 0x4126ca
mov ecx, 0x47ef00
call fcn.0041cd1e
push eax
push 0x14
push dword [esi + 8]
call ebp
push eax
call edi
push ebx
push ebx
mov ecx, esi
call fcn.00414c1b
mov ecx, esi
call fcn.00412e58
cmp byte [0x47f27c], bl
mov dword [0x47e658], 7
jne 0x412701
mov ecx, 0x47ef0c
call fcn.0041cd1e
push eax
push 0x14
push dword [esi + 8]
call ebp
push eax
call edi
push ebx
push ebx
mov ecx, esi
call fcn.00414c1b
mov ecx, esi
call fcn.00410891
test al, al
jne 0x41272e
push ebx
mov ecx, 0x47ef18
call fcn.0041cd1e
push eax
mov ecx, 0x47dfb8
push dword [esi + 8]
call fcn.0041b2a8
cmp byte [0x47f27c], bl
mov dword [0x47e658], 8
jne 0x412755
mov ecx, 0x47ef24
call fcn.0041cd1e
push eax
push 0x14
push dword [esi + 8]
call ebp
push eax
call edi
push ebx
push ebx
mov ecx, esi
call fcn.00414c1b
push 0x47e548
mov ecx, esi
call fcn.00413cff
push dword [esi + 8]
mov ecx, 0x47e788
call fcn.00422e9c
test al, al
je 0x412848
push ebx
push 0x64
mov ecx, esi
call fcn.00414c1b
cmp dword [0x47e610], ebx
jne 0x4127d0
cmp dword [0x47e4a0], ebx
mov eax, dword [0x47e190]
jg 0x4127a5
test eax, 0x20000
jne 0x4127d0
cmp byte [0x47f27c], bl
jne 0x412821
test eax, 0x10000
je 0x4127d8
push 1
push 0x42e0c8
push ebx
mov ecx, esi
call fcn.00411811
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp byte [0x47f27c], bl
jne 0x412821
mov ecx, 0x47f208
call fcn.0040fc45
push dword [0x47e178]
call dword [sym.imp.USER32.dll_GetDC]
push 0xcc0020
push ebx
push ebx
mov esi, eax
push dword [0x47e184]
push dword [0x47e174]
push dword [0x47e170]
push ebx
push ebx
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
push esi
push dword [0x47e178]
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x412830
call fcn.00423f22
call fcn.00423f52
call fcn.00424003
cmp dword [0x47e610], ebx
jne 0x412846
push ebx
push ebx
push ebx
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov bl, 1
lea ecx, [esp + 0x1c]
call fcn.0041befb
mov al, bl
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret 4