Function at 0x41875c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x418764
push ecx
push ebx
push esi
push edi
mov eax, 0x4186d4
call fcn.00405f94
xor eax, eax
push ebp
push 0x418b24
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [0x41d8dc], eax
xor ecx, ecx
mov dl, 1
mov eax, dword [0x416d8c]
call fcn.00416f38
mov ebx, eax
mov byte [ebx + 0x30], 1
mov byte [ebx + 0x31], 1
lea eax, [ebx + 0x32]
mov edx, 0x418b3c
call fcn.004042c8
mov dl, 1
mov eax, dword [0x410bdc]
call fcn.00403510
mov dword [0x41d8d4], eax
mov dl, 1
mov eax, dword [0x410bdc]
call fcn.00403510
mov esi, eax
lea edx, [ebp - 0x14]
xor eax, eax
call fcn.00402da8
mov eax, dword [ebp - 0x14]
mov edx, dword [0x41d8d4]
call fcn.004185b4
mov byte [0x41d938], al
cmp byte [0x41d938], 0
je 0x418861
mov edx, dword [0x41d8d4]
mov eax, ebx
call fcn.00417078
mov ecx, esi
mov edx, 0x418b60
mov eax, ebx
call fcn.00416fc4
mov dl, 1
mov eax, dword [0x4108ec]
call fcn.00403510
mov dword [0x41d8d8], eax
mov edx, esi
mov eax, dword [0x41d8d8]
mov ecx, dword [eax]
call dword [ecx + 0x6c]
mov eax, esi
call fcn.0041370c
mov ecx, esi
mov edx, 0x418b6c
mov eax, ebx
call fcn.00416fc4
xor ecx, ecx
xor edx, edx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x14]
mov edx, 0x41d8dc
mov ecx, 4
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [0x41d8d4]
call fcn.00403540
mov eax, esi
call fcn.00403540
mov eax, ebx
call fcn.00403540
cmp byte [0x41d938], 0
je 0x418b09
lea eax, [ebp - 0x18]
call fcn.0041858c
mov edx, dword [ebp - 0x18]
mov eax, 0x41d93c
call fcn.004042c8
call fcn.00402e0c
push 0x418b7c
mov eax, 9
call fcn.00402f8c
lea edx, [ebp - 0x1c]
call fcn.0040742c
push dword [ebp - 0x1c]
mov eax, 9
call fcn.00402f8c
lea edx, [ebp - 0x20]
call fcn.0040742c
push dword [ebp - 0x20]
mov eax, 9
call fcn.00402f8c
lea edx, [ebp - 0x24]
call fcn.0040742c
push dword [ebp - 0x24]
mov eax, 9
call fcn.00402f8c
lea edx, [ebp - 0x28]
call fcn.0040742c
push dword [ebp - 0x28]
push 0x418b88
mov eax, 0x41d940
mov edx, 6
call fcn.004045f4
lea eax, [ebp - 0x2c]
mov ecx, dword [0x41d940]
mov edx, dword [0x41d93c]
call fcn.00404580
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x41d8d8]
mov ecx, dword [eax]
call dword [ecx + 0x74]
lea eax, [ebp - 0x30]
mov ecx, dword [0x41d940]
mov edx, dword [0x41d93c]
call fcn.00404580
mov eax, dword [ebp - 0x30]
mov edx, 2
call fcn.004078ac
mov eax, dword [0x41d8d8]
call fcn.00403540
mov eax, 0x41d934
call fcn.00404274
call fcn.00402d40
test eax, eax
jle 0x4189a7
call fcn.00402d40
mov ebx, eax
test ebx, ebx
jle 0x4189a7
mov esi, 1
push dword [0x41d934]
push 0x418b98
lea edx, [ebp - 0x34]
mov eax, esi
call fcn.00402da8
push dword [ebp - 0x34]
mov eax, 0x41d934
mov edx, 3
call fcn.004045f4
inc esi
dec ebx
jne 0x41897c
mov dword [0x41d834], 0xc
mov dword [0x41d83c], 0xffffffff
xor eax, eax
mov dword [0x41d838], eax
mov eax, 0x41d8e0
xor ecx, ecx
mov edx, 0x44
call fcn.00402f6c
mov dword [0x41d8e0], 0x44
mov dword [0x41d90c], 1
mov word [0x41d910], 0
cmp dword [0x41d8dc], 0x8000
jne 0x418a0f
push 0x30
push 0x418b9c
push 0x418bac
push 0
call sub.user32.dll_MessageBoxA_1
mov dword [0x41d840], 0x94
push 0x41d840
call sub.kernel32.dll_GetVersionExA
cmp dword [0x41d850], 2
jne 0x418a54
push 0x418c38
push dword [0x41d93c]
push dword [0x41d940]
push dword [0x41d934]
mov eax, 0x41d934
mov edx, 4
call fcn.004045f4
jmp 0x418a7a
push 0x418c4c
push dword [0x41d93c]
push dword [0x41d940]
push dword [0x41d934]
mov eax, 0x41d934
mov edx, 4
call fcn.004045f4
push 0x41d924
push 0x41d8e0
push 0
push 0
push 0x20
push 0xffffffffffffffff
push 0x41d834
push 0x41d834
mov eax, dword [0x41d934]
call fcn.00404734
push eax
push 0
call sub.kernel32.dll_CreateProcessA
test eax, eax
je 0x418aed
push 0xffffffffffffffff
mov eax, dword [0x41d924]
push eax
call sub.kernel32.dll_WaitForSingleObject
mov eax, dword [0x41d924]
push eax
call sub.kernel32.dll_CloseHandle
mov eax, dword [0x41d928]
push eax
call sub.kernel32.dll_CloseHandle
lea eax, [ebp - 0x38]
mov ecx, dword [0x41d940]
mov edx, dword [0x41d93c]
call fcn.00404580
mov eax, dword [ebp - 0x38]
call fcn.004078d4
jmp 0x418b09
lea eax, [ebp - 0x3c]
mov ecx, dword [0x41d940]
mov edx, dword [0x41d93c]
call fcn.00404580
mov eax, dword [ebp - 0x3c]
call fcn.004078d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x418b2b
lea eax, [ebp - 0x3c]
mov edx, 0xb
call fcn.00404298
ret