Function at 0x4d8ca8
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff68
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 4], ecx
mov edi, edx
mov esi, eax
xor eax, eax
push ebp
push 0x4d8f65
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4d8f35
push dword fs:[eax]
mov dword fs:[eax], esp
push esi
push 0x4d8f80
push edi
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040501c
mov dword [ebp - 0x20], 0xc
xor eax, eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], 0xc
xor eax, eax
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x24], eax
xor esi, esi
mov dword [ebp - 0x70], 0x44
xor eax, eax
mov dword [ebp - 0x6c], eax
xor eax, eax
mov dword [ebp - 0x68], eax
xor eax, eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x44], 1
mov word [ebp - 0x3e], 0
xor eax, eax
mov dword [ebp - 0x3c], eax
mov ax, word [ebp + 0xc]
mov word [ebp - 0x40], ax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
mov eax, dword [ebp - 4]
call fcn.0040515c
push eax
push esi
push 0x24
push 0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0xc]
call fcn.0040515c
push eax
push 0
call sub.kernel32.dll_CreateProcessA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0xd], al
push 0x118
call sub.kernel32.dll_Sleep_1
mov eax, dword [ebp - 0x7c]
push eax
call fcn.00407a1c
cmp byte [ebp - 0xd], 0
jne 0x4d8e13
lea edx, [ebp - 0x88]
mov eax, dword [0x558fe8]
mov eax, dword [eax]
call fcn.0049b4c0
push dword [ebp - 0x88]
push 0x4d8f8c
push dword [ebp - 0xc]
push 0x4d8f8c
call sub.kernel32.dll_GetLastError_1
lea edx, [ebp - 0x8c]
call fcn.0040f95c
push dword [ebp - 0x8c]
lea eax, [ebp - 0x84]
mov edx, 5
call fcn.0040501c
mov eax, dword [ebp - 0x84]
mov edx, 1
call fcn.004d9204
mov dword [ebp - 0x14], 0x103
xor eax, eax
push ebp
push 0x4d8ef9
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x4d8e75
mov eax, dword [0x558fe8]
mov eax, dword [eax]
call fcn.0049ad04
xor eax, eax
push ebp
push 0x4d8e58
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x3e8
call sub.kernel32.dll_Sleep_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d8e62
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x80]
push eax
call sub.kernel32.dll_GetExitCodeProcess
cmp eax, 1
sbb ebx, ebx
inc ebx
cmp byte [ebp - 0xd], 1
jne 0x4d8e8a
cmp dword [ebp - 0x14], 0x103
jne 0x4d8e8a
cmp byte [ebp + 8], 1
je 0x4d8e2a
cmp byte [ebp - 0xd], 1
jne 0x4d8eef
test bl, bl
jne 0x4d8eef
lea edx, [ebp - 0x94]
mov eax, dword [0x558fe8]
mov eax, dword [eax]
call fcn.0049b4c0
push dword [ebp - 0x94]
push 0x4d8f9c
push dword [ebp - 0xc]
push 0x4d8f8c
call sub.kernel32.dll_GetLastError_1
lea edx, [ebp - 0x98]
call fcn.0040f95c
push dword [ebp - 0x98]
lea eax, [ebp - 0x90]
mov edx, 5
call fcn.0040501c
mov eax, dword [ebp - 0x90]
mov edx, 1
call fcn.004d9204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d8f03
mov eax, dword [ebp - 0x14]
mov dword [ebp - 8], eax
cmp byte [ebp - 0xd], 1
jne 0x4d8f2b
mov eax, dword [ebp - 0x80]
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 0x7c]
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d8f3f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d8f3f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d8f6c
lea eax, [ebp - 0x98]
mov edx, 6
call fcn.00404ca4
lea eax, [ebp - 0xc]
call fcn.00404c80
ret