Function at 0x49f0cc
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov eax, 0x49edac
call fcn.004068e8
mov edi, dword [0x4a4c68]
xor eax, eax
push ebp
push 0x49f3b6
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4a7da8
lea edx, [ebp - 0x18]
mov eax, 1
call fcn.00402b48
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
call fcn.004088a0
mov eax, dword [ebp - 0x14]
mov ecx, 2
mov edx, 1
call fcn.00404c40
mov eax, dword [0x4a7da8]
mov edx, 0x49f3d0
call fcn.00404b2c
jne 0x49f1ed
lea edx, [ebp - 0x1c]
mov eax, 2
call fcn.00402b48
mov eax, dword [ebp - 0x1c]
call fcn.00408e94
mov ebx, eax
mov eax, dword [0x4a4fa4]
mov eax, dword [eax]
call fcn.0045f3bc
mov ecx, ebx
mov dl, 1
mov eax, dword [0x49b218]
call fcn.00441fc4
mov dword [edi], eax
mov eax, dword [edi]
mov byte [eax + 0x35c], 1
push 0x4a7dac
push ebx
call sub.user32.dll_GetClientRect
push 4
mov eax, dword [0x4a7db8]
push eax
mov eax, dword [0x4a7db4]
push eax
push 0
push 0
push 0
mov eax, dword [edi]
call fcn.004461f4
push eax
call sub.user32.dll_SetWindowPos
push 0xffffffffffffffec
mov eax, dword [0x4a4fa4]
mov eax, dword [eax]
mov ebx, dword [eax + 0x30]
push ebx
call sub.user32.dll_GetWindowLongA
or eax, 0x80
push eax
push 0xffffffffffffffec
mov eax, dword [0x4a4fa4]
push ebx
call sub.user32.dll_SetWindowLongA
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xec]
mov eax, dword [0x4a4fa4]
mov eax, dword [eax]
call fcn.0045f454
jmp 0x49f39b
mov eax, dword [0x4a7da8]
mov edx, 0x49f3dc
call fcn.00404b2c
jne 0x49f2b1
xor eax, eax
push ebp
push 0x49f2a2
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43314c]
call fcn.0043324c
mov esi, eax
mov edx, 0x80000002
mov eax, esi
call fcn.004332ec
mov cl, 1
mov edx, 0x49f3e8
mov eax, esi
call fcn.00433350
lea ecx, [ebp - 0x20]
mov edx, 0x49f404
mov eax, esi
call fcn.004334ec
mov edx, dword [ebp - 0x20]
mov eax, 0x4a7dbc
call fcn.00404774
mov eax, dword [0x4a7dbc]
call fcn.00409260
test al, al
je 0x49f28e
push 0x49f408
push 0
call sub.user32.dll_FindWindowA
mov ebx, eax
test ebx, ebx
jne 0x49f288
push 5
mov eax, dword [0x4a7dbc]
call fcn.00404be0
push eax
call sub.kernel32.dll_WinExec
jmp 0x49f28e
push ebx
call sub.user32.dll_SetForegroundWindow
mov eax, esi
call fcn.0040394c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49f39b
mov eax, dword [0x4a4fa4]
mov eax, dword [eax]
call fcn.0045f3bc
mov eax, dword [0x4a5140]
mov eax, dword [eax]
call fcn.0045cf6c
mov esi, eax
dec esi
test esi, esi
jl 0x49f36a
inc esi
xor ebx, ebx
mov ecx, edi
mov eax, dword [0x4a4fa4]
mov eax, dword [eax]
mov edx, dword [0x49b218]
call fcn.0045f3d4
mov eax, dword [0x4a5140]
mov eax, dword [eax]
mov edx, ebx
call fcn.0045cf58
call fcn.0045cc28
mov edx, eax
mov eax, dword [edi]
call fcn.0043f0fc
mov eax, dword [0x4a5140]
mov eax, dword [eax]
mov edx, ebx
call fcn.0045cf58
call fcn.0045cc5c
mov edx, eax
mov eax, dword [edi]
call fcn.0043f120
mov eax, dword [0x4a5140]
mov eax, dword [eax]
mov edx, ebx
call fcn.0045cf58
call fcn.0045cc74
mov edx, eax
mov eax, dword [edi]
call fcn.0043f148
mov eax, dword [0x4a5140]
mov eax, dword [eax]
mov edx, ebx
call fcn.0045cf58
call fcn.0045cc40
mov edx, eax
mov eax, dword [edi]
call fcn.0043f16c
mov eax, dword [edi]
call fcn.0045bebc
inc ebx
dec esi
jne 0x49f2d7
push 0xffffffffffffffec
mov eax, dword [0x4a4fa4]
mov eax, dword [eax]
mov ebx, dword [eax + 0x30]
push ebx
call sub.user32.dll_GetWindowLongA
or eax, 0x80
push eax
push 0xffffffffffffffec
mov eax, dword [0x4a4fa4]
push ebx
call sub.user32.dll_SetWindowLongA
mov eax, dword [0x4a4fa4]
mov eax, dword [eax]
call fcn.0045f454
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49f3bd
lea eax, [ebp - 0x20]
mov edx, 4
call fcn.00404744
ret