Function at 0x4149b2
Capabilities:
Create process on windows

Disassembly:
enter 0x848, 2
push ebx
push ecx
push edx
mov dword [ebp - 4], eax
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x110]
call fcn.00401940
mov dword [ebp - 0xc], esp
lea edi, [ebp - 0x24c]
mov esi, 0x49914b
push 0xa
call fcn.00401950
movzx eax, byte [ebp - 0x110]
movsx ebx, ax
test ebx, ebx
jle 0x414a3b
mov word [ebp - 0x250], bx
mov word [ebp - 0x234], 0
inc word [ebp - 0x234]
movsx eax, word [ebp - 0x234]
mov dword [ebp - 0x254], eax
movsx ebx, word [ebp - 0x234]
mov al, byte [ebp + ebx - 0x110]
push eax
call fcn.004111c0
mov ecx, dword [ebp - 0x254]
mov byte [ebp + ecx - 0x110], al
dec word [ebp - 0x250]
jne 0x4149fd
lea edi, [ebp - 0x118]
mov esi, 0x49914c
push 4
call fcn.00401950
lea edi, [ebp - 0x228]
mov esi, 0x49914d
call fcn.00401940
push 0x49914e
lea eax, [ebp - 0x110]
push eax
call fcn.0040ca70
test eax, eax
ja 0x414d57
push 0x499154
lea eax, [ebp - 0x110]
push eax
call fcn.0040ca70
test eax, eax
ja 0x414d57
push 0x499159
lea eax, [ebp - 0x110]
push eax
call fcn.0040ca70
test eax, eax
ja 0x414d57
push 0x49915e
lea eax, [ebp - 0x110]
push eax
call fcn.0040ca70
test eax, eax
ja 0x414d57
lea eax, [ebp - 0x128]
push eax
movzx ebx, byte [ebp - 0x110]
add ebx, 5
push ebx
call fcn.00403920
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x499163
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
lea edi, [ebp - 0x228]
mov esi, 0x499168
call fcn.00401940
cmp word [ebp - 0x230], 0
jle 0x414b7f
movsx eax, word [ebp - 0x230]
push eax
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x499169
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x49916e
push 4
call fcn.00401950
jmp 0x414d3b
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x499172
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x414c0e
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x499178
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x49917e
push 4
call fcn.00401950
jmp 0x414d3b
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x499183
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x414c9d
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x499188
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x49918d
push 4
call fcn.00401950
jmp 0x414d3b
push dword [ebp - 0x128]
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x499191
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x42
push dword [ebp - 0x128]
call sub.kernel32.dll__lopen
mov word [ebp - 0x230], ax
cmp ax, 0
jle 0x414d29
movsx ebx, ax
push ebx
call sub.kernel32.dll__lclose
lea esi, [ebp - 0x110]
lea edi, [ebp - 0x350]
call fcn.00401b30
mov esi, 0x499196
call fcn.00401af0
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x350]
call fcn.00401940
lea edi, [ebp - 0x118]
mov esi, 0x49919b
push 4
call fcn.00401950
jmp 0x414d3b
lea edi, [ebp - 0x118]
mov esi, 0x49919f
push 4
call fcn.00401950
lea eax, [ebp - 0x128]
push eax
movzx ebx, byte [ebp - 0x110]
add ebx, 5
push ebx
call fcn.004030f0
jmp 0x414df5
push 0x4991a0
lea eax, [ebp - 0x110]
push eax
call fcn.0040ca70
test eax, eax
jbe 0x414d80
lea edi, [ebp - 0x118]
mov esi, 0x4991a5
push 4
call fcn.00401950
jmp 0x414de4
push 0x4991a9
lea eax, [ebp - 0x110]
push eax
call fcn.0040ca70
test eax, eax
jbe 0x414da9
lea edi, [ebp - 0x118]
mov esi, 0x4991af
push 4
call fcn.00401950
jmp 0x414de4
push 0x4991b4
lea eax, [ebp - 0x110]
push eax
call fcn.0040ca70
test eax, eax
jbe 0x414dd2
lea edi, [ebp - 0x118]
mov esi, 0x4991b9
push 4
call fcn.00401950
jmp 0x414de4
lea edi, [ebp - 0x118]
mov esi, 0x4991bd
push 4
call fcn.00401950
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x110]
call fcn.00401940
mov byte [ebp - 0x10], 0
lea esi, [ebp - 0x228]
mov edi, 0x4991c1
call fcn.004130c0
test al, al
je 0x41512b
lea esi, [ebp - 0x118]
mov edi, 0x4991c2
call fcn.004130c0
test al, al
je 0x414f89
lea eax, [ebp - 0x24c]
push eax
call fcn.00413460
lea ebx, [ebp - 0x128]
push ebx
push 0xff
call fcn.00403920
push 0xa
lea eax, [ebp - 0x240]
mov byte [eax], 0
push eax
mov eax, dword [0x4a91ad]
push dword [eax + 0xaf5]
push 0xa
call fcn.00413430
add esp, 8
push dword [ebp - 0x128]
mov esi, 0x4a90ad
lea edi, [ebp - 0x850]
call fcn.00401b30
mov esi, 0x4991c6
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x750]
call fcn.00401b30
lea esi, [ebp - 0x228]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x650]
call fcn.00401b30
mov esi, 0x4991d3
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x550]
call fcn.00401b30
lea esi, [ebp - 0x24c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x450]
call fcn.00401b30
mov esi, 0x4991d6
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x350]
call fcn.00401b30
lea esi, [ebp - 0x240]
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401a00
push 0x64
push 0x4e20
mov eax, dword [0x4a91ad]
call fcn.00413402
push 0
push dword [ebp - 0x128]
call sub.kernel32.dll_WinExec
mov word [ebp - 0x234], ax
lea ebx, [ebp - 0x128]
push ebx
push 0xff
call fcn.004030f0
lea eax, [ebp - 0x124]
push eax
mov eax, dword [0x4a91ad]
call fcn.00412252
cmp al, 0x2c
jne 0x414f3b
push 0x64
mov eax, dword [0x4a91ad]
call fcn.004133d2
cmp word [ebp - 0x234], 0x1f
jle 0x414f79
lea edi, [ebp - 0x228]
lea esi, [ebp - 0x24c]
call fcn.00401940
jmp 0x414f89
lea edi, [ebp - 0x228]
mov esi, 0x4991d8
call fcn.00401940
lea esi, [ebp - 0x228]
mov edi, 0x4991d9
call fcn.004130c0
test al, al
je 0x41512b
call fcn.00415140
cmp word [ebp - 0x230], 0
jle 0x4150c9
push 2
lea eax, [ebp - 0x124]
push eax
movsx ebx, word [ebp - 0x230]
push ebx
call sub.kernel32.dll__lread
lea edi, [ebp - 0x120]
mov esi, 0x4991da
push 6
call fcn.00401950
movzx eax, word [ebp - 0x124]
push eax
call fcn.00413340
movzx ebx, al
mov byte [ebp - 0x11f], bl
movzx eax, word [ebp - 0x124]
push eax
call fcn.00413330
movzx ebx, al
mov byte [ebp - 0x11e], bl
lea esi, [ebp - 0x120]
mov edi, 0x4991dd
call fcn.00410f80
test al, al
je 0x41506e
push dword [ebp + 0xc]
mov ax, word [ebp - 0x230]
push eax
mov eax, dword [ebp - 4]
call fcn.004130e2
test al, al
je 0x415039
mov byte [ebp - 0x10], 1
jmp 0x41506c
movzx eax, byte [0x4a8cf7]
cmp ax, 0x54
jne 0x415057
push 0x4991e0
push 0x4991f4
call fcn.00411e00
jmp 0x41506c
cmp ax, 0x45
jne 0x41506c
push 0x49920b
push 0x49922b
call fcn.00411e00
jmp 0x4150ba
movzx eax, byte [0x4a8cf7]
cmp ax, 0x54
jne 0x4150a5
push 0x49922c
mov esi, 0x49923d
lea edi, [ebp - 0x350]
call fcn.00401b30
lea esi, [ebp - 0x120]
call fcn.00401af0
mov ebx, edi
push ebx
call fcn.00411e00
jmp 0x4150ba
cmp ax, 0x45
jne 0x4150ba
push 0x499262
push 0x499275
call fcn.00411e00
movsx eax, word [ebp - 0x230]
push eax
call sub.kernel32.dll__lclose
jmp 0x415100
movzx eax, byte [0x4a8cf7]
cmp ax, 0x54
jne 0x4150e9
push 0x499276
lea ebx, [ebp - 0x228]
push ebx
call fcn.00411e00
jmp 0x415100
cmp ax, 0x45
jne 0x415100
push 0x499292
lea ebx, [ebp - 0x228]
push ebx
call fcn.00411e00
lea esi, [ebp - 0x24c]
mov edi, 0x4992ae
call fcn.004130c0
test al, al
je 0x41512b
push 0x4a9229
mov eax, esi
push eax
call fcn.00401e60
push 0x4a9229
call fcn.00413080
mov al, byte [ebp - 0x10]
pop edx
pop ecx
pop ebx
leave
ret 8