Function at 0x412ca4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x412cac
push ebx
push esi
xor eax, eax
push ebp
push 0x412f96
push dword fs:[eax]
mov dword fs:[eax], esp
mov ebx, 0x7530
push 0x412fa4
push 0xffffffffffffffff
push 0
call fcn.004056f0
test eax, eax
je 0x412f7b
push eax
call sub.kernel32.dll_CloseHandle
call sub.kernel32.dll_GetLastError
cmp eax, 0xb7
je 0x412f7b
call fcn.00412b8c
mov esi, eax
test esi, esi
je 0x412e09
test esi, esi
je 0x412d33
push 0xfffffffffffffff8
push esi
call sub.user32.dll_GetWindowLongA
push eax
call sub.user32.dll_IsIconic
test eax, eax
je 0x412d33
push 0
push 0xf120
push 0x112
push 0xfffffffffffffff8
push esi
call sub.user32.dll_GetWindowLongA
push eax
call sub.user32.dll_SendMessageA
lea edx, [ebp - 4]
mov eax, 1
call fcn.004028dc
mov eax, dword [ebp - 4]
mov edx, 0x412fd4
call fcn.00403e2c
jne 0x412d79
push 0
lea edx, [ebp - 8]
mov eax, 2
call fcn.004028dc
mov eax, dword [ebp - 8]
xor edx, edx
call fcn.00406b04
push eax
push 0x467
push esi
call sub.user32.dll_PostMessageA
jmp 0x412f7b
lea edx, [ebp - 0xc]
mov eax, 1
call fcn.004028dc
mov eax, dword [ebp - 0xc]
mov edx, 0x412fe0
call fcn.00403e2c
jne 0x412dbf
push 0
lea edx, [ebp - 0x10]
mov eax, 2
call fcn.004028dc
mov eax, dword [ebp - 0x10]
xor edx, edx
call fcn.00406b04
push eax
push 0x468
push esi
call sub.user32.dll_PostMessageA
jmp 0x412f7b
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.004028dc
mov eax, dword [ebp - 0x14]
mov edx, 0x412fec
call fcn.00403e2c
jne 0x412f7b
push 0
lea edx, [ebp - 0x18]
mov eax, 2
call fcn.004028dc
mov eax, dword [ebp - 0x18]
xor edx, edx
call fcn.00406b04
push eax
push 0x469
push esi
call sub.user32.dll_PostMessageA
jmp 0x412f7b
push 5
push 0
push 0
lea eax, [ebp - 0x1c]
call fcn.00412150
lea eax, [ebp - 0x1c]
mov edx, 0x412ff8
call fcn.00403ce8
mov eax, dword [ebp - 0x1c]
call fcn.00403ed0
push eax
push 0x413008
push 0
call sub.shell32.dll_ShellExecuteA
test ebx, ebx
jbe 0x412e72
lea eax, [ebp - 0x20]
call fcn.00412150
lea eax, [ebp - 0x20]
mov edx, 0x413018
call fcn.00403ce8
mov eax, dword [ebp - 0x20]
call fcn.00406e74
test al, al
jne 0x412e72
push 0x3e8
call sub.kernel32.dll_Sleep
sub ebx, 0x3e8
test ebx, ebx
ja 0x412e3d
call fcn.00412b8c
mov esi, eax
test esi, esi
je 0x412f7b
test esi, esi
je 0x412eb1
push 0xfffffffffffffff8
push esi
call sub.user32.dll_GetWindowLongA
push eax
call sub.user32.dll_IsIconic
test eax, eax
je 0x412eb1
push 0
push 0xf120
push 0x112
push 0xfffffffffffffff8
push esi
call sub.user32.dll_GetWindowLongA
push eax
call sub.user32.dll_SendMessageA
lea edx, [ebp - 0x24]
mov eax, 1
call fcn.004028dc
mov eax, dword [ebp - 0x24]
mov edx, 0x412fd4
call fcn.00403e2c
jne 0x412ef7
push 0
lea edx, [ebp - 0x28]
mov eax, 2
call fcn.004028dc
mov eax, dword [ebp - 0x28]
xor edx, edx
call fcn.00406b04
push eax
push 0x467
push esi
call sub.user32.dll_PostMessageA
jmp 0x412f7b
lea edx, [ebp - 0x2c]
mov eax, 1
call fcn.004028dc
mov eax, dword [ebp - 0x2c]
mov edx, 0x412fe0
call fcn.00403e2c
jne 0x412f3a
push 0
lea edx, [ebp - 0x30]
mov eax, 2
call fcn.004028dc
mov eax, dword [ebp - 0x30]
xor edx, edx
call fcn.00406b04
push eax
push 0x468
push esi
call sub.user32.dll_PostMessageA
jmp 0x412f7b
lea edx, [ebp - 0x34]
mov eax, 1
call fcn.004028dc
mov eax, dword [ebp - 0x34]
mov edx, 0x412fec
call fcn.00403e2c
jne 0x412f7b
push 0
lea edx, [ebp - 0x38]
mov eax, 2
call fcn.004028dc
mov eax, dword [ebp - 0x38]
xor edx, edx
call fcn.00406b04
push eax
push 0x469
push esi
call sub.user32.dll_PostMessageA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x412f9d
lea eax, [ebp - 0x38]
mov edx, 0xe
call fcn.00403a68
ret