Function at 0x414d2a
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
xor ebx, ebx
cmp byte [ebp + 0xc], bl
push esi
push edi
mov esi, 0x482320
je 0x414db2
mov edi, 0x482524
mov ecx, esi
push edi
call fcn.00418d60
push edi
mov ecx, esi
call fcn.0041d46a
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041e10f
push 1
mov edi, 0x482524
push ebx
push 0x42fb7c
mov ecx, edi
call fcn.0041f507
push eax
push ebx
mov ecx, edi
call fcn.0041f9d6
push eax
lea ecx, [ebp - 0xc]
call fcn.0041eb84
push 1
lea ecx, [ebp - 0xc]
call fcn.0041fa6a
push eax
push ebx
mov ecx, edi
call fcn.0041fa6a
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xc]
call fcn.0041ebe6
cmp byte [ebp + 8], bl
je 0x414f44
mov edi, 0x482518
mov ecx, esi
push edi
call fcn.00418d60
push edi
mov ecx, esi
call fcn.0041d46a
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041e10f
lea ecx, [ebp - 0x18]
call fcn.0041eab0
lea ecx, [ebp - 0x24]
call fcn.0041eab0
push ebx
mov ecx, 0x482518
call fcn.0041f608
cmp al, 0x22
jne 0x414e42
mov ecx, 0x482518
call fcn.0041fa6a
inc eax
lea ecx, [ebp - 0xc]
push eax
call fcn.0041eb20
push 1
push ebx
push 0x4300dc
lea ecx, [ebp - 0xc]
call fcn.0041f3fc
cmp eax, 0xffffffff
je 0x414e38
push eax
push ebx
lea ecx, [ebp - 0xc]
call fcn.0041f9d6
push eax
lea ecx, [ebp - 0x18]
call fcn.0041ecc1
lea ecx, [ebp - 0xc]
call fcn.0041ebe6
jmp 0x414e4b
push edi
lea ecx, [ebp - 0x18]
call fcn.0041ecc1
cmp dword [ebp - 0x18], ebx
jbe 0x414e7d
push 1
push ebx
push 0x42fb7c
lea ecx, [ebp - 0x18]
call fcn.0041f507
cmp eax, 0xffffffff
je 0x414e7d
cmp eax, 1
jle 0x414e7d
push eax
push ebx
lea ecx, [ebp - 0x18]
call fcn.0041f9d6
push eax
lea ecx, [ebp - 0x24]
call fcn.0041ecc1
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00427c50
push 0x44
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.00427c50
add esp, 0x18
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x84], 0x44
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041eab0
push ebx
mov ecx, 0x482518
call fcn.0041f608
cmp al, 0x22
jne 0x414ed1
push edi
lea ecx, [ebp - 0x30]
call fcn.0041ecc1
jmp 0x414eed
mov ecx, 0x482518
call fcn.0041fa6a
push eax
lea eax, [ebp - 0x30]
push 0x4300d4
push eax
call fcn.0041f193
add esp, 0xc
cmp dword [ebp - 0x24], ebx
jbe 0x414efc
lea ecx, [ebp - 0x24]
call fcn.0041fa6a
jmp 0x414efe
xor eax, eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x84]
push ecx
push eax
push ebx
push 0x4000000
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.0041fa6a
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x30]
call fcn.0041ebe6
lea ecx, [ebp - 0x24]
call fcn.0041ebe6
lea ecx, [ebp - 0x18]
call fcn.0041ebe6
cmp byte [ebp + 0x10], bl
je 0x414ff9
mov edi, 0x4825fc
mov ecx, esi
push edi
call fcn.00418d60
push edi
mov ecx, esi
call fcn.0041d46a
push 0x7fffffff
push edi
mov ecx, esi
call fcn.0041e10f
push 0x10
lea eax, [ebp - 0x40]
push ebx
push eax
call fcn.00427c50
push 0x44
lea eax, [ebp - 0x84]
pop esi
push esi
push ebx
push eax
call fcn.00427c50
add esp, 0x18
lea ecx, [ebp - 0xc]
mov dword [ebp - 0x84], esi
push 1
pop eax
mov dword [ebp - 0x58], eax
mov word [ebp - 0x54], ax
call fcn.0041eab0
mov ecx, 0x4825fc
call fcn.0041fa6a
push eax
lea eax, [ebp - 0xc]
push 0x4300d4
push eax
call fcn.0041f193
add esp, 0xc
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xc]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push ebx
push 0x4000000
push ebx
push ebx
push ebx
call fcn.0041fa6a
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xc]
call fcn.0041ebe6
pop edi
pop esi
pop ebx
leave
ret 0xc