Function at 0x41468d
Capabilities:
Create process on windows

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x46ae26
push eax
mov dword fs:[0], esp
sub esp, 0x9f0
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x6108]
test eax, eax
je case.0x414a62.506
mov eax, dword [0x4a92ec]
mov ebx, dword [esp + 0xa18]
or ebp, 0xffffffff
test eax, eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x10], ebp
je 0x4147b5
lea ecx, [esi + 0xcc]
call fcn.00413740
test al, al
jne 0x4147b5
mov eax, dword [esi + 0x61a8]
xor ebp, ebp
test eax, eax
jle 0x4147b2
mov edi, dword [esi + 0x61ac]
push 0x4872c8
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString_3
mov eax, dword [esp + 0xa10]
mov dword [esp + 0xa08], 0
cmp eax, 0x201
mov dword [esp + 0x1c], 0xffffffff
jne 0x414746
mov edx, dword [esp + 0xa14]
lea eax, [esp + 0x14]
add edi, ebp
push 1
lea ecx, [esp + 0x20]
push eax
shl edi, 5
push ecx
push ebx
push edx
lea ecx, [edi + esi + 0x2108]
call fcn.0045d120
test eax, eax
jne 0x414827
jmp 0x41478f
cmp eax, 0x200
jne 0x41478f
mov edx, dword [esp + 0xa14]
lea eax, [esp + 0x14]
add edi, ebp
push 0
lea ecx, [esp + 0x20]
push eax
shl edi, 5
push ecx
push ebx
push edx
lea ecx, [edi + esi + 0x2108]
call fcn.0045d120
test eax, eax
je 0x41478f
mov eax, dword [0x4a91b0]
push 1
push 4
push 0x4a7
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x14]
mov dword [esp + 0xa08], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, dword [esi + 0x61a8]
inc ebp
cmp ebp, eax
jl 0x4146e1
or ebp, 0xffffffff
lea edi, [esi + 0xcc]
mov dword [esp + 0x18], ebp
mov ecx, edi
mov dword [esp + 0x10], ebp
call fcn.00413740
test al, al
je 0x4148bd
cmp dword [esp + 0xa10], 0x201
jne 0x4148bd
mov edx, dword [esp + 0xa14]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
push ecx
push ebx
push edx
mov ecx, edi
call fcn.00413750
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x41480b
mov dword [esi + 0xd0], eax
push 0
push 2
mov ecx, edi
call fcn.00413800
push 3
mov ecx, 0x4a9188
call fcn.00462ce0
jmp case.0x414a62.506
mov esi, dword [esp + 0x1c]
cmp esi, 1
jne 0x41484a
mov ecx, dword [esp + 0x14]
push 5
push 0
push 0
push ecx
push str.Open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4148a4
cmp esi, 0x400
jl 0x4148a4
mov edx, dword [esp + 0x14]
mov ecx, 0x1ff
xor eax, eax
lea edi, [esp + 0x201]
mov ebp, dword [edx - 8]
mov byte [esp + 0x200], 0
rep stosd dword es:[edi], eax
push 0x7ff
push edx
stosw word es:[edi], ax
lea edx, [esp + 0x208]
push edx
stosb byte es:[edi], al
call dword [sym.imp.MSVCRT.dll_strncpy]
mov eax, dword [0x4a91b0]
add esp, 0xc
lea ecx, [esp + 0x200]
mov edx, dword [eax + 0x20]
push ecx
push ebp
push esi
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x14]
mov dword [esp + 0xa08], 0xffffffff
call sub.MFC42.DLL_CString::CString
jmp case.0x414a62.506
mov edx, dword [esp + 0xa14]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
push ecx
push ebx
push edx
mov ecx, edi
mov dword [esp + 0x28], ebp
mov dword [esp + 0x20], ebp
call fcn.00413750
mov eax, dword [esp + 0x10]
cmp eax, ebp
jne 0x4148fa
cmp dword [esi + 0xd4], ebp
je 0x41495e
push ebp
mov dword [esi + 0xd4], ebp
push 0
jmp 0x414957
mov ecx, dword [esp + 0xa10]
mov dword [esi + 0xd4], eax
sub ecx, 0x200
je 0x414954
dec ecx
je 0x41494f
dec ecx
jne 0x41495e
push eax
push 0
mov ecx, edi
call fcn.00413800
mov eax, dword [esi + 0xd0]
test eax, eax
jle 0x41495e
mov ecx, dword [0x4a92f0]
test ecx, ecx
je 0x41495e
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
push ecx
mov ecx, edi
call fcn.00413950
mov ecx, 0x4a9190
call fcn.00449b10
jmp 0x41495e
push eax
push 2
jmp 0x414957
push eax
push 1
mov ecx, edi
call fcn.00413800
mov ecx, dword [esp + 0xa14]
lea edx, [esp + 0x10]
lea eax, [esp + 0x18]
push edx
push eax
lea edi, [esi + 0xa4c]
push ebx
push ecx
mov ecx, edi
mov dword [esp + 0x28], ebp
mov dword [esp + 0x20], ebp
call fcn.00412e80
mov eax, dword [esp + 0x10]
cmp eax, ebp
jne 0x4149e7
cmp dword [esi + 0x6280], ebp
je 0x4149e7
push ebp
push 0
mov ecx, edi
mov dword [esi + 0x6280], ebp
call fcn.004130c0
mov eax, dword [0x4a92ec]
test eax, eax
je case.0x414a62.506
mov ecx, esi
call fcn.00415200
mov edx, dword [0x4a91b0]
mov esi, dword [sym.imp.USER32.dll_KillTimer]
push 0x91
mov eax, dword [edx + 0x20]
push eax
call esi
mov ecx, dword [0x4a91b0]
push 0x92
mov edx, dword [ecx + 0x20]
push edx
call esi
jmp case.0x414a62.506
mov ecx, dword [esp + 0xa10]
mov dword [esi + 0x6280], eax
sub ecx, 0x200
je 0x414beb
dec ecx
je 0x414ba4
dec ecx
jne case.0x414a62.506
mov ecx, dword [0x4a92ec]
test ecx, ecx
je 0x414a45
mov eax, dword [0x4a91b0]
mov ebp, dword [sym.imp.USER32.dll_KillTimer]
push 0x91
mov eax, dword [eax + 0x20]
push eax
call ebp
mov eax, dword [0x4a91b0]
push 0x92
mov ecx, dword [eax + 0x20]
push ecx
call ebp
mov eax, dword [esp + 0x10]
or ebp, 0xffffffff
push eax
push 0
mov ecx, edi
call fcn.004130c0
mov edx, dword [esp + 0x10]
lea eax, [edx - 0x1f5]
cmp eax, 5
ja case.0x414a62.506
jmp dword [eax*4 + 0x414c10]
mov eax, dword [0x4a92ec]
test eax, eax
je case.0x414a62.506
mov ecx, esi
call fcn.00414540
jmp 0x414a93
mov eax, dword [0x4a92ec]
test eax, eax
je case.0x414a62.506
mov ecx, esi
call fcn.004145d0
mov ecx, esi
call fcn.00415200
push 3
mov ecx, 0x4a9188
call fcn.00462ce0
jmp case.0x414a62.506
mov eax, dword [0x4a92f0]
test eax, eax
je case.0x414a62.506
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [0x4a91b0]
lea eax, [esp + 0x14]
push eax
push 0x404
mov dword [esp + 0xa10], 1
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 8]
test eax, eax
je 0x414b1e
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call sub.MFC42.DLL_CString::CString_1
mov ecx, 0x4a9190
call fcn.00449b10
mov ecx, dword [0x4a91b0]
push 0x4872c8
push 0x404
call sub.MFC42.DLL_CWnd::SetDlgItemTextA
jmp 0x414b40
mov byte [esi + 0x627c], 1
mov eax, dword [0x4a91b0]
push 0
push 0x7d0
mov eax, dword [eax + 0x20]
push 0x96
push eax
call dword [sym.imp.USER32.dll_SetTimer]
lea ecx, [esp + 0x14]
mov dword [esp + 0xa08], ebp
call sub.MFC42.DLL_CString::CString
jmp case.0x414a62.506
mov eax, dword [0x4a92f0]
test eax, eax
je case.0x414a62.506
mov ecx, esi
call fcn.00414c30
jmp case.0x414a62.506
mov eax, dword [0x4a92f0]
test eax, eax
je case.0x414a62.506
mov ecx, 0x78
xor eax, eax
lea edi, [esp + 0x20]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x24], 0x64
push ecx
push 0xf
mov ecx, 0x4a9158
mov dword [esp + 0x33], 2
call fcn.0041f750
jmp case.0x414a62.506
push eax
push 2
mov ecx, edi
call fcn.004130c0
mov eax, dword [0x4a92ec]
test eax, eax
je case.0x414a62.506
mov esi, dword [esi + 0x6280]
cmp esi, 0x1f5
je 0x414bcd
cmp esi, 0x1f6
jne case.0x414a62.506
mov edx, dword [0x4a91b0]
push 0
push 0x12c
push 0x91
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp case.0x414a62.506
push eax
push 1
mov ecx, edi
call fcn.004130c0
mov ecx, dword [esp + 0xa00]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x9fc
ret 0x10