Function at 0x41d64b
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov al, byte [0x7f5500]
push ebx
push edi
push dword [ebp + 0xc]
push eax
push dword [ebp + 8]
call fcn.00412eee
mov dword [ebp + 0xc], eax
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
mov al, byte [0x7f5500]
push 5
push eax
push 0x7fd60c
call fcn.00412eee
mov dword [0x7fd614], eax
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
mov al, byte [0x7f5500]
push 0xd
push eax
push 0x7fd618
call fcn.00412eee
add esp, 0x24
mov dword [0x7fd628], eax
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
push 3
push 0
push dword [ebp + 0xc]
push dword [0x7fd628]
push dword [0x7fd614]
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
push dword [0x7fd614]
call fcn.0042881a
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
and dword [0x7fd614], 0
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
push dword [0x7fd628]
call fcn.0042881a
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
and dword [0x7fd628], 0
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
push dword [ebp + 0xc]
call fcn.0042881a
add esp, 0xc
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
lea ecx, [ecx]
sub eax, dword [0x7f5508]
sub ebx, dword [str.dj:]
sub edx, dword [0x7f550c]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub ecx, dword [0x7f5510]
mov edx, edx
add ebx, dword [str.dj:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
inc edx
add edx, dword [0x7f550c]
push 1
pop eax
pop edi
pop ebx
pop ebp
ret