Function at 0x40114e
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x4fc
mov eax, dword [0x423414]
xor eax, esp
mov dword [esp + 0x4f8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
push 6
push edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x1c], edi
call dword [sym.imp.ole32.dll_CoInitializeEx]
push esi
lea ecx, [esp + 0x1ac]
call fcn.00408083
mov eax, dword [esp + 0x218]
or eax, dword [esp + 0x21c]
je 0x4011dc
cmp dword [esp + 0x1bc], edi
je 0x4011dc
lea eax, [esp + 0x1a8]
call fcn.0040102b
cmp dword [eax + 0x14], edi
je 0x4011dc
cmp dword [esp + 0x1f4], edi
je 0x4011dc
cmp dword [esp + 0x210], edi
je 0x4011dc
cmp dword [esp + 0x250], edi
je 0x4011dc
cmp dword [esp + 0x26c], edi
jne 0x401236
push str.http:___s_downloadhelperxmlnotfound.jsp
lea esi, [esp + 0xa4]
call fcn.004018a5
mov eax, esi
push eax
lea eax, [esp + 0xc0]
call fcn.00401000
cmp dword [eax + 0x18], 8
jb 0x401207
mov eax, dword [eax + 4]
jmp 0x40120a
add eax, 4
push edi
mov esi, eax
call fcn.00404e50
pop ecx
push edi
push 1
lea esi, [esp + 0xc4]
call fcn.00401b29
push edi
push 1
lea esi, [esp + 0xa8]
call fcn.00401b29
jmp 0x4016fc
call fcn.00408f5d
mov edi, eax
lea ecx, [esp + 0x1a8]
mov ebx, edi
mov dword [esp + 0x18], edi
call fcn.0040904b
lea eax, [esp + 0x1a8]
call fcn.0040102b
push esi
mov ecx, eax
lea ebx, [esp + 0x114]
call fcn.0040b766
xor ebx, ebx
lea esi, [esp + 0x110]
mov byte [esp + 0x145], bl
call fcn.00406c09
cmp byte [esp + 0x180], bl
je 0x4016ef
cmp byte [esp + 0x183], bl
jne 0x4012ab
cmp byte [esp + 0x181], bl
jne 0x4012ab
cmp byte [esp + 0x182], bl
je 0x40161a
lea ecx, [esp + 0xa0]
call fcn.00405b53
cmp dword [esp + 0xb4], ebx
je 0x4014b3
cmp dword [esp + 0xb8], 8
mov ecx, dword [esp + 0xa4]
jae 0x4012dc
lea ecx, [esp + 0xa4]
lea eax, [esp + 0x3c]
push eax
call fcn.00405cad
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0xa4]
push ecx
xor ebx, ebx
call fcn.00401922
push ebx
push 1
lea esi, [esp + 0x44]
call fcn.00401b29
xor eax, eax
mov dword [esp + 0xbc], ebx
lea edi, [esp + 0xc0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x40
stosd dword es:[edi], eax
lea eax, [esp + 0x60]
push ebx
push eax
mov dword [esp + 0x64], ebx
call fcn.0040e350
add esp, 0xc
push 0x7f
lea eax, [esp + 0x485]
push ebx
push eax
mov byte [esp + 0x48c], bl
call fcn.0040e350
add esp, 0xc
lea ecx, [esp + 0x20]
lea eax, [esp + 0x110]
call fcn.00401090
cmp dword [eax + 0x18], 8
jb 0x401360
mov eax, dword [eax + 4]
jmp 0x401363
add eax, 4
mov ecx, eax
lea eax, [esp + 0x3c]
call fcn.00401139
cmp dword [eax + 0x18], 0x10
jb 0x401379
mov ecx, dword [eax + 4]
jmp 0x40137c
lea ecx, [eax + 4]
lea edx, [esp + 0x480]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x401383
push ebx
push 1
lea ecx, [esp + 0x44]
call fcn.00402443
push ebx
push 1
lea esi, [esp + 0x28]
call fcn.00401b29
cmp dword [esp + 0xb8], 8
mov ecx, dword [esp + 0xa4]
jae 0x4013bd
lea ecx, [esp + 0xa4]
lea eax, [esp + 0x20]
call fcn.00401139
cmp dword [eax + 0x18], 0x10
jb 0x4013d1
mov eax, dword [eax + 4]
jmp 0x4013d4
add eax, 4
lea ecx, [esp + 0xbc]
push ecx
lea ecx, [esp + 0x5c]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x4a0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
neg ebx
sbb bl, bl
xor edi, edi
push 0
inc edi
push edi
lea ecx, [esp + 0x28]
inc bl
call fcn.00402443
test bl, bl
je 0x4014ad
lea ecx, [esp + 0xd8]
lea eax, [esp + 0x110]
call fcn.00401090
cmp dword [eax + 0x18], 8
jb 0x401433
mov eax, dword [eax + 4]
jmp 0x401436
add eax, 4
mov ecx, eax
lea eax, [esp + 0x3c]
call fcn.00401139
cmp dword [eax + 0x18], 0x10
jb 0x40144c
mov esi, dword [eax + 4]
jmp 0x40144f
lea esi, [eax + 4]
cmp dword [esp + 0xb8], 8
mov ecx, dword [esp + 0xa4]
jae 0x401467
lea ecx, [esp + 0xa4]
lea eax, [esp + 0x20]
call fcn.00401139
cmp dword [eax + 0x18], 0x10
jb 0x40147b
mov eax, dword [eax + 4]
jmp 0x40147e
add eax, 4
push eax
mov ecx, esi
call fcn.004043e8
pop ecx
xor esi, esi
push esi
push edi
lea ecx, [esp + 0x28]
call fcn.00402443
push esi
push edi
lea ecx, [esp + 0x44]
call fcn.00402443
push esi
push edi
lea esi, [esp + 0xe0]
call fcn.00401b29
mov edi, dword [esp + 0x18]
xor ebx, ebx
lea esi, [esp + 0xa0]
jmp 0x401612
cmp dword [edi + 0xa8], ebx
jne 0x401632
or dword [esp + 0x14], 1
lea ecx, [esp + 0x20]
mov eax, edi
call fcn.0040104a
cmp dword [eax + 0x14], ebx
je 0x4014fc
or dword [esp + 0x14], 2
lea ecx, [esp + 0xd8]
mov eax, edi
call fcn.00401062
mov byte [esp + 0x13], bl
cmp dword [eax + 0x14], ebx
jne 0x401501
mov byte [esp + 0x13], 1
test byte [esp + 0x14], 2
je 0x40151c
and dword [esp + 0x14], 0xfffffffd
push ebx
push 1
lea esi, [esp + 0xe0]
call fcn.00401b29
test byte [esp + 0x14], 1
je 0x401534
and dword [esp + 0x14], 0xfffffffe
push ebx
push 1
lea esi, [esp + 0x28]
call fcn.00401b29
cmp byte [esp + 0x13], bl
je 0x40157c
lea eax, [esp + 0x1a8]
call fcn.0040102b
push dword [esp + 0x1c]
lea ecx, [esp + 0xdc]
push ecx
mov ecx, eax
call fcn.00409fdd
lea esi, [esp + 0xd8]
call fcn.00406c09
mov ecx, esi
mov dword [esp + 0xd8], 0x41fb58
call fcn.00406be9
jmp 0x40161a
push 7
pop eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xb8], eax
xor eax, eax
mov word [esp + 0xa4], ax
lea eax, [esp + 0xa0]
push eax
xor ecx, ecx
lea eax, [esp + 0xc0]
mov word [esp + 0xc4], cx
push eax
lea ecx, [esp + 0x28]
mov eax, edi
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xbc], ebx
call fcn.00401062
push eax
lea ecx, [esp + 0xe4]
mov eax, edi
call fcn.0040104a
push eax
mov eax, edi
call fcn.004094c8
push ebx
push 1
lea esi, [esp + 0xe0]
call fcn.00401b29
push ebx
push 1
lea esi, [esp + 0x28]
call fcn.00401b29
push ebx
push 1
lea esi, [esp + 0xa8]
call fcn.00401b29
lea esi, [esp + 0xbc]
push ebx
push 1
call fcn.00401b29
cmp byte [edi + 0x2b1], bl
je 0x4014bf
cmp dword [edi + 0xa8], ebx
je 0x4016ef
lea eax, [esp + 0x1a8]
call fcn.0040102b
mov esi, eax
lea ecx, [esp + 0xd8]
lea eax, [esp + 0x110]
call fcn.0040107a
lea ecx, [esp + 0x18c]
push ecx
mov edx, esi
mov ecx, eax
call fcn.00405358
pop ecx
push ebx
push 1
lea esi, [esp + 0xe0]
call fcn.00401b29
push dword [esp + 0x21c]
lea eax, [esp + 0x200]
push dword [esp + 0x21c]
add edi, 0x94
push eax
push edi
lea ecx, [esp + 0xe8]
lea eax, [esp + 0x120]
call fcn.0040107a
push eax
lea eax, [esp + 0x1a0]
push eax
push dword [esp + 0x34]
lea eax, [esp + 0x38c]
push eax
call fcn.0040a1d2
push ebx
push 1
lea esi, [esp + 0xe0]
call fcn.00401b29
lea esi, [esp + 0x370]
call fcn.00406c09
mov ecx, esi
call fcn.0040a332
push ebx
push 1
lea esi, [esp + 0x194]
call fcn.00401b29
lea eax, [esp + 0x110]
push eax
call fcn.0040184d
lea eax, [esp + 0x1a8]
push eax
call fcn.00401722
mov ecx, dword [esp + 0x504]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.0040c34a
mov esp, ebp
pop ebp
ret 0x10