Function at 0x41b32b
Capabilities:
Create process on windows

Disassembly:
push 0x78
mov eax, 0x431edc
call fcn.0041d1a8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x44], eax
mov esi, dword [ebp + 0x1c]
xor eax, eax
mov dword [ebp - 4], eax
test esi, esi
je 0x41b693
cmp esi, 0x10000
jae 0x41b693
push 0x3c
pop edi
push edi
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.0041ea90
mov bh, byte [ebp + 0x28]
add esp, 0xc
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x80], 0x1c0
test bh, bh
je 0x41b388
mov dword [ebp - 0x80], 0x5c0
mov edx, dword [ebp + 0x20]
lea eax, [ebp + 0xc]
mov ecx, dword [ebp + 0xc]
cmp edx, 7
jbe 0x41b398
mov eax, ecx
push 0x22
pop edi
cmp word [eax], di
lea eax, [ebp + 0xc]
jne 0x41b3af
cmp edx, 7
jbe 0x41b3aa
mov eax, ecx
add eax, 2
jmp 0x41b3b6
cmp edx, 7
jbe 0x41b3b6
mov eax, ecx
xor edi, edi
mov dword [ebp - 0x74], eax
mov eax, edi
test esi, esi
je 0x41b44c
lea edi, [ebp + 0xc]
cmp edx, 7
jbe 0x41b3cf
mov edi, ecx
push 0x22
pop esi
cmp word [edi + eax*2], si
mov esi, dword [ebp + 0x1c]
jne 0x41b411
jmp 0x41b3f3
lea edi, [ebp + 0xc]
cmp edx, 7
jbe 0x41b3e7
mov edi, ecx
push 0x22
pop edx
cmp word [edi + eax*2], dx
mov edx, dword [ebp + 0x20]
je 0x41b3fa
inc eax
cmp eax, esi
jb 0x41b3dd
jmp 0x41b411
lea esi, [ebp + 0xc]
cmp edx, 7
jbe 0x41b404
mov esi, ecx
push 0x20
pop ecx
mov word [esi + eax*2], cx
mov edx, dword [ebp + 0x20]
mov ecx, dword [ebp + 0xc]
lea edi, [ebp + 0xc]
cmp edx, 7
jbe 0x41b41b
mov edi, ecx
push 0x20
pop esi
cmp word [edi + eax*2], si
mov esi, dword [ebp + 0x1c]
je 0x41b5ba
lea edi, [ebp + 0xc]
cmp edx, 7
jbe 0x41b435
mov edi, ecx
cmp word [edi + eax*2 + 2], 0x2f
je 0x41b5ba
inc eax
cmp eax, esi
jb 0x41b3c5
xor edi, edi
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x41b458
cmp word [eax], di
jne 0x41b47b
test bh, bh
jne 0x41b47b
cmp dword [0x45bba0], 0
je 0x41b47b
cmp dword [0x45bba4], 7
mov eax, 0x45bb90
jbe 0x41b478
mov eax, dword [0x45bb90]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 0x24]
push dword [ebp - 0x74]
mov dword [ebp - 0x68], eax
call fcn.0040655f
mov esi, eax
test esi, esi
je 0x41b4a5
push str..inf
push esi
call fcn.0040cd15
test eax, eax
jne 0x41b4a5
mov dword [ebp - 0x78], str.Install
push dword [ebp - 0x74]
lea ecx, [ebp - 0x40]
call fcn.004014a2
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 1
push eax
call fcn.00404c97
lea ecx, [ebp - 0x40]
mov bl, al
call fcn.00401780
xor eax, eax
lea edi, [ebp - 0x28]
stosd dword es:[edi], eax
push 7
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
and dword [ebp - 0x18], 0
pop edi
mov dword [ebp - 0x14], edi
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 2
test bl, bl
je 0x41b51e
push dword [ebp - 0x74]
lea ecx, [ebp - 0x40]
call fcn.004014a2
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00405ff4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.00401780
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], edi
jbe 0x41b51b
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x41b64a
xor eax, eax
mov bl, al
cmp byte [0x45bb38], al
jne 0x41b54f
test bh, bh
jne 0x41b54f
cmp byte [0x45bb1f], al
je 0x41b5fb
mov edi, dword [ebp - 0x44]
test edi, edi
je 0x41b56d
push edi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41b56d
xor eax, eax
push eax
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
mov bl, 1
push 0x7d0
push dword [ebp - 0x4c]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
push dword [ebp - 0x4c]
call fcn.0041ba28
cmp byte [0x45bb1f], 0
je 0x41b5fe
test bh, bh
jne 0x41b5fe
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x4c]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x41b5fe
mov eax, dword [ebp - 0x48]
cmp eax, dword [0x45c03c]
jbe 0x41b5b1
mov dword [0x45c03c], eax
mov byte [0x45c040], 1
jmp 0x41b5fe
lea esi, [ebp + 0xc]
cmp edx, 7
jbe 0x41b5c4
mov esi, ecx
push 0x20
pop edi
cmp word [esi + eax*2], di
jne 0x41b5e3
lea esi, [ebp + 0xc]
cmp edx, 7
jbe 0x41b5d7
mov esi, ecx
xor ecx, ecx
mov word [esi + eax*2], cx
mov edx, dword [ebp + 0x20]
mov ecx, dword [ebp + 0xc]
lea esi, [ebp + 0xc]
cmp edx, 7
jbe 0x41b5ed
mov esi, ecx
inc eax
xor edi, edi
lea eax, [esi + eax*2]
mov dword [ebp - 0x70], eax
jmp 0x41b44f
mov edi, dword [ebp - 0x44]
push dword [ebp - 0x4c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x41b61a
push str..exe
push esi
call fcn.0040cd15
test eax, eax
je 0x41b639
cmp byte [0x45bb38], 0
je 0x41b639
test bh, bh
jne 0x41b639
cmp byte [0x45bb1f], bh
jne 0x41b639
mov dword [0x45c044], 0x1b58
test bl, bl
je 0x41b64a
test bh, bh
je 0x41b64a
push 1
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x14]
push 7
pop ebx
cmp eax, ebx
jbe 0x41b687
mov ecx, dword [ebp - 0x28]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], ecx
cmp eax, 0x1000
jb 0x41b67e
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004016c3
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
push eax
push ecx
call fcn.0041d0f6
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], eax
mov word [ebp - 0x28], ax
lea ecx, [ebp + 0xc]
call fcn.00401780
call fcn.0041d157
ret 0x24