Function at 0x414d16
Capabilities:
Create process on windows

Disassembly:
push ebp
sub esp, 0x1a0
lea ebp, [esp - 4]
mov eax, dword [0x43fee0]
xor eax, ebp
mov dword [ebp + 0x1a0], eax
push 0xc
mov eax, 0x427a32
call fcn.00422efe
mov esi, dword [ebp + 0x1ac]
push 4
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0x1b0]
mov dword [ebp - 4], 1
call dword [sym.imp.MFC80.DLL_Ordinal_5563]
push str..hlp
mov ecx, eax
call dword [sym.imp.MFC80.DLL_Ordinal_1486]
lea ecx, [ebp - 0x10]
mov edi, eax
call dword [sym.imp.MFC80.DLL_Ordinal_578]
xor ebx, ebx
cmp edi, ebx
je 0x414f31
lea ecx, [ebp - 0x14]
call dword [sym.imp.MFC80.DLL_Ordinal_310]
mov ecx, dword [ebp + 0x1b0]
mov eax, dword [ecx - 0xc]
cmp eax, 7
mov byte [ebp - 4], 2
jl 0x414e71
push 3
add eax, 0xfffffff9
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0x1b0]
call dword [sym.imp.MFC80.DLL_Ordinal_4109]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call dword [sym.imp.MFC80.DLL_Ordinal_781]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call dword [sym.imp.MFC80.DLL_Ordinal_578]
push dword [ebp + 0x1bc]
lea ecx, [ebp - 0x14]
call dword [sym.imp.MFC80.DLL_Ordinal_1486]
test eax, eax
je 0x414e71
push 0x432208
lea ecx, [ebp - 0x14]
call dword [sym.imp.MFC80.DLL_Ordinal_1486]
test eax, eax
jne 0x414e71
push 3
push dword [ebp + 0x1c0]
lea ecx, [ebp]
push 2
push str.EnglishHelpFile
call fcn.0041bc35
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 4
call fcn.0040fd2b
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
call fcn.0040fd2b
push 0x5019
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
call fcn.0040fd38
push 0x19
push dword [ebp - 0x18]
lea eax, [ebp - 0x10]
push eax
call fcn.0040fdc4
add esp, 0xc
push ebx
push 0x40
push dword [ebp - 0x10]
lea ecx, [ebp]
call fcn.0041b707
lea ecx, [ebp - 0x18]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [ebp]
mov byte [ebp - 4], 2
call fcn.00414ca7
push 5
push ebx
push ebx
push dword [ebp + 0x1b0]
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edi, eax
cmp edi, 0x20
jge 0x414f26
cmp edi, 0x1f
jne 0x414eb6
push ebx
lea ecx, [ebp + 0x1c]
call fcn.0041b49a
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 7
call sub.MFC80.DLL_Ordinal_2020
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 2
call fcn.00414c74
jmp 0x414f26
mov esi, 0xff
push esi
lea eax, [ebp + 0xa1]
push ebx
push eax
mov byte [ebp + 0xa0], bl
call sub.MSVCR80.dll_memset
add esp, 0xc
push ebx
push esi
lea eax, [ebp + 0xa0]
push eax
push 0x400
push edi
push ebx
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MFC80.DLL_Ordinal_310]
lea eax, [ebp + 0xa0]
push eax
lea eax, [ebp - 0x10]
push 0x5014
push eax
mov byte [ebp - 4], 8
call dword [sym.imp.MFC80.DLL_Ordinal_2324]
add esp, 0xc
push ebx
push ebx
push dword [ebp - 0x10]
call sub.MFC80.DLL_Ordinal_1123
lea ecx, [ebp - 0x10]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [ebp - 0x14]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
jmp 0x414f51
call fcn.00407b5f
test eax, eax
je 0x414f51
cmp esi, ebx
je 0x414f51
push dword [ebp + 0x1b8]
mov ecx, esi
push dword [ebp + 0x1b4]
call sub.MFC80.DLL_Ordinal_6278
lea ecx, [ebp + 0x1b0]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [ebp + 0x1bc]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1a0]
xor ecx, ebp
call fcn.00422a47
add ebp, 0x1a4
leave
ret