Function at 0x4108d0
Capabilities:
Create process on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1098
call fcn.0041bb90
mov eax, dword [0x41e038]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
lea ecx, [ebp - 0x2c]
push 1
mov edx, ecx
xor ebx, ebx
push edx
mov dword [ebp - 0x1050], eax
mov dword [ebp - 0x105c], 0xc
mov dword [ebp - 0x1054], ebx
mov dword [ebp - 0x1058], ecx
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov eax, dword [ebp - 0x1058]
push ebx
push ebx
push 1
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
push 0x401b64
push 0x800
push ebx
push 4
lea ecx, [ebp - 0x105c]
push ecx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x41e52c], eax
cmp eax, ebx
jne 0x4109d2
push 0x42
mov eax, 0x402e48
xor edx, edx
lea esi, [ebp - 0x1048]
mov dword [ebp - 0x1034], 7
mov dword [ebp - 0x1038], ebx
mov word [ebp - 0x1048], dx
call fcn.004088c0
mov eax, dword [ebp - 0x1048]
mov esi, 8
cmp dword [ebp - 0x1034], esi
jae 0x410996
lea eax, [ebp - 0x1048]
push 0x40010
push 0x401968
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0x1034], esi
jb 0x4109c0
mov eax, dword [ebp - 0x1048]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b4f6
mov esp, ebp
pop ebp
ret
push 0x800
push ebx
push ebx
push 0xf001f
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0x41e528], eax
cmp eax, ebx
jne 0x410a07
mov ecx, dword [0x41e52c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40
mov eax, 0x402ed0
jmp 0x410959
mov ecx, 0x402f54
mov eax, 8
cmp dword [0x41e6d8], ebx
jne 0x410a21
mov dword [ebp - 0x104c], ecx
jmp 0x410a41
cmp dword [0x41e6dc], eax
jb 0x410a37
mov edx, dword [0x41e6c8]
mov dword [ebp - 0x104c], edx
jmp 0x410a41
mov dword [ebp - 0x104c], 0x41e6c8
cmp dword [0x41e684], ebx
jne 0x410a4d
mov edx, ecx
jmp 0x410a60
mov edx, dword [0x41e674]
cmp dword [0x41e688], eax
jae 0x410a60
mov edx, 0x41e674
push edi
cmp dword [0x41e668], ebx
jne 0x410a6d
mov edi, ecx
jmp 0x410a80
mov edi, dword [0x41e658]
cmp dword [0x41e66c], eax
jae 0x410a80
mov edi, 0x41e658
cmp dword [0x41e5f8], ebx
je 0x410a9b
mov ecx, dword [0x41e5e8]
cmp dword [0x41e5fc], eax
jae 0x410a9b
mov ecx, 0x41e5e8
mov esi, dword [0x41e63c]
cmp dword [0x41e650], eax
jae 0x410aae
mov esi, 0x41e63c
cmp dword [0x41e5e0], eax
mov eax, dword [0x41e5cc]
jae 0x410ac0
mov eax, 0x41e5cc
xor ebx, ebx
cmp byte [0x41e576], bl
setne bl
push ebx
mov ebx, dword [ebp - 0x104c]
push ebx
push edx
push edi
push ecx
mov ecx, dword [0x41e570]
push esi
push ecx
push eax
lea edx, [ebp - 0x102c]
push 0x402f58
push edx
or edx, 0xffffffff
call fcn.004125e0
mov ecx, dword [0x41e528]
push 0x1000
lea eax, [ebp - 0x102c]
push eax
push ecx
call sub.MSVCR100.dll_memcpy
add esp, 0x34
call fcn.00411750
pop edi
test eax, eax
je 0x410b5a
call fcn.004116a0
test eax, eax
jne 0x410b5a
mov edx, dword [ebp - 0x1050]
push eax
push 0x40c680
push edx
push 0x6f
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
neg eax
sbb eax, eax
not eax
and eax, dword [0x41e56c]
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b4f6
mov esp, ebp
pop ebp
ret
push 0x38
lea eax, [ebp - 0x1094]
push 0
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
cmp dword [0x41e1bc], 8
mov dword [ebp - 0x1098], 0x3c
mov dword [ebp - 0x1094], 0x40
mov dword [ebp - 0x1090], 0
mov dword [ebp - 0x108c], 0x402f88
jb 0x410bac
mov ecx, dword [0x41e1a8]
mov dword [ebp - 0x1088], ecx
jmp 0x410bb6
mov dword [ebp - 0x1088], 0x41e1a8
lea edx, [ebp - 0x1098]
push edx
mov dword [ebp - 0x1084], 0x401ae0
mov dword [ebp - 0x107c], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
call fcn.00411750
test eax, eax
jne 0x410bf3
push eax
push eax
push eax
push 0x410c10
push eax
push eax
call dword [sym.imp.MSVCR100.dll__beginthreadex]
add esp, 0x18
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x1060]
pop esi
xor ecx, ebp
pop ebx
call fcn.0041b4f6
mov esp, ebp
pop ebp
ret