Function at 0x413a2b
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xac
push esi
xor esi, esi
cmp dword [0x47a3d8], esi
mov dword [esp + 0x18], ecx
mov dword [esp + 0xc], esi
jle 0x413f03
push ebx
push ebp
push edi
mov ebx, 0x479ee8
push dword [esp + 0x18]
mov ecx, 0x47a3cc
call fcn.0041c45e
mov ebp, eax
mov dword [esp + 0x10], ebp
mov eax, dword [ebp + 0x28]
cmp eax, dword [esp + 0xc0]
jne 0x413eec
push dword [ebp + 0x2c]
mov ecx, dword [esp + 0x28]
call fcn.004121cd
test al, al
je 0x413eec
lea edi, [ebp + 4]
mov ecx, ebx
push edi
call fcn.004189c2
add ebp, 0x10
mov ecx, ebx
push ebp
call fcn.004189c2
mov eax, dword [esp + 0x10]
mov ecx, ebx
add eax, 0x1c
push eax
call fcn.004189c2
push 0x7fffffff
push edi
mov ecx, ebx
call fcn.00419277
push 0x7fffffff
push ebp
mov ecx, ebx
call fcn.00419277
mov eax, dword [esp + 0x10]
push 0x7fffffff
add eax, 0x1c
mov ecx, ebx
push eax
call fcn.00419277
mov eax, dword [0x47a040]
mov ecx, dword [0x47a0a0]
cmp eax, esi
je 0x413af5
mov eax, dword [eax + 4]
cmp eax, esi
mov dword [esp + 0x14], eax
jne 0x413b0d
mov eax, dword [0x479e90]
cmp eax, esi
je 0x413b09
mov eax, dword [eax + 4]
cmp eax, esi
mov dword [esp + 0x14], eax
jne 0x413b0d
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
cmp eax, 4
je 0x413e08
cmp eax, 7
je 0x413e08
cmp eax, 5
jne 0x413b38
push 1
mov ecx, ebx
call fcn.004184d0
jmp 0x413ee4
cmp eax, 6
jne 0x413da2
push esi
push 0x405700
push ecx
push 0x12
push dword [0x47a0a4]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
lea ecx, [esp + 0x28]
mov dword [esp + 0x20], eax
call fcn.00419c64
push str.___Internal_WaitExternal___
call fcn.0041b2db
cmp eax, esi
je 0x413b7d
push eax
lea ecx, [esp + 0x2c]
call fcn.00419db1
jmp 0x413b8b
push 0x47af1c
lea ecx, [esp + 0x2c]
call fcn.00419e1f
push 1
push esi
push esi
push 0x428254
push str.__n_
lea ecx, [esp + 0x3c]
call fcn.0041aa75
lea ecx, [esp + 0x28]
call fcn.0041ab9e
push eax
push 0x422
push dword [esp + 0x28]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov ecx, 0x47a728
call fcn.0041ab9e
push eax
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x10
lea eax, [esp + 0x50]
push esi
push eax
call fcn.00421740
push 0x44
lea eax, [esp + 0x88]
push esi
push eax
call fcn.00421740
mov eax, dword [esp + 0x28]
add esp, 0x18
mov dword [esp + 0x78], 0x44
mov dword [esp + 0x80], 0x429ff8
cmp dword [eax + 0x1c], esi
lea ecx, [eax + 0x1c]
mov dword [esp + 0x14], esi
jne 0x413c44
push 1
push esi
push 0x427c6c
mov ecx, edi
call fcn.0041a683
cmp eax, 0xffffffff
je 0x413c4d
push eax
push esi
mov ecx, edi
call fcn.0041ab15
push eax
mov eax, dword [esp + 0x14]
lea ecx, [eax + 0x1c]
call fcn.00419e1f
mov eax, dword [esp + 0x10]
lea ecx, [eax + 0x1c]
call fcn.0041ab9e
mov dword [esp + 0x14], eax
mov ecx, edi
call fcn.0041ab9e
mov dword [esp + 0x1c], eax
mov eax, dword [edi]
cmp eax, 4
jbe 0x413ce8
add eax, 0xfffffffc
push 4
push eax
mov ecx, edi
call fcn.0041ab15
push eax
lea ecx, [esp + 0x38]
call fcn.00419d38
push esi
push str..bat
lea ecx, [esp + 0x3c]
call fcn.0041a099
test al, al
jne 0x413cb3
push esi
push str..cmd
lea ecx, [esp + 0x3c]
call fcn.0041a099
test al, al
jne 0x413cb3
push esi
push str..com
lea ecx, [esp + 0x3c]
call fcn.0041a099
test al, al
je 0x413cdf
push esi
push 0x22
mov ecx, edi
mov dword [esp + 0x24], esi
call fcn.0041a8a9
push esi
push 0x428370
mov ecx, edi
call fcn.00419ee6
push esi
push esi
mov ecx, edi
call fcn.0041ab9e
push eax
mov ecx, ebp
call fcn.0041a8c8
lea ecx, [esp + 0x34]
call fcn.00419d9a
lea eax, [esp + 0x4c]
mov ecx, ebp
push eax
lea eax, [esp + 0x7c]
push eax
push dword [esp + 0x1c]
push esi
push 0x4000000
push esi
push esi
push esi
call fcn.0041ab9e
push eax
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x413d8a
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x1c], eax
push 0xff
push 0xffffffffffffffff
lea eax, [esp + 0x24]
push esi
push eax
push 1
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
cmp eax, esi
je 0x413d78
cmp eax, 1
jne 0x413d78
push esi
push esi
push esi
lea eax, [esp + 0x68]
push esi
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x413d1d
push esi
push esi
lea eax, [esp + 0x64]
push esi
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x413d1d
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x413d3b
push dword [esp + 0x4c]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [esp + 0x50]
call edi
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_DestroyWindow]
lea ecx, [esp + 0x28]
call fcn.00419d9a
jmp 0x413ee4
cmp eax, esi
je 0x413daa
mov dword [esp + 0x14], esi
push str.open
lea ecx, [esp + 0x44]
call fcn.00419cd4
mov eax, dword [esp + 0x10]
cmp dword [eax], 3
jne 0x413dcf
push str.explore
lea ecx, [esp + 0x44]
call fcn.00419db1
mov eax, dword [esp + 0x10]
push 1
lea ecx, [eax + 0x1c]
call fcn.0041ab9e
push eax
mov ecx, ebp
call fcn.0041ab9e
push eax
mov ecx, edi
call fcn.0041ab9e
push eax
lea ecx, [esp + 0x50]
call fcn.0041ab9e
push eax
push dword [esp + 0x28]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [esp + 0x40]
jmp 0x413d98
push 1
push esi
push esi
push 0x428364
push str.__t_
mov ecx, edi
call fcn.0041aa75
push 1
push esi
push esi
push 0x428358
push str.__r_
mov ecx, edi
call fcn.0041aa75
push 1
push esi
push esi
push 0x428254
push str.__n_
mov ecx, edi
call fcn.0041aa75
push 1
push esi
push esi
push 0x428364
push str.__t_
mov ecx, ebp
call fcn.0041aa75
push 1
push esi
push esi
push 0x428358
push str.__r_
mov ecx, ebp
call fcn.0041aa75
push 1
push esi
push esi
push 0x428254
push str.__n_
mov ecx, ebp
call fcn.0041aa75
mov eax, dword [esp + 0x10]
mov ecx, ebp
cmp dword [eax], 4
jne 0x413ead
call fcn.0041ab9e
push esi
push eax
mov ecx, edi
call fcn.0041ab9e
push eax
mov ecx, ebx
push dword [esp + 0x20]
call fcn.004191a7
jmp 0x413ee4
call fcn.0041ab9e
push 4
push eax
mov ecx, edi
call fcn.0041ab9e
push eax
mov ecx, ebx
push dword [esp + 0x20]
call fcn.004191a7
xor ecx, ecx
cmp eax, 6
mov eax, dword [esp + 0x10]
setne cl
inc ecx
push ecx
lea ecx, [eax + 0x1c]
call fcn.0041ab9e
push eax
call fcn.0041b579
mov eax, dword [esp + 0x10]
or dword [eax + 0x28], 0xffffffff
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
cmp eax, dword [0x47a3d8]
jl 0x413a50
pop edi
pop ebp
pop ebx
push 1
pop eax
pop esi
add esp, 0xac
ret 4