Function at 0x4103b0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x134
push ebx
push esi
push edi
mov esi, ecx
call dword [sym.imp.USER32.dll_GetFocus]
mov ecx, dword [esi + 0x24]
cmp eax, ecx
jne 0x410434
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 2
push 0xffffffffffffffff
push 0x100c
push ecx
call edi
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 4
push eax
push 0
push 0x1005
push ecx
mov dword [esp + 0x28], 0
call edi
test eax, eax
je 0x41060f
mov eax, dword [esp + 0x30]
test eax, eax
je 0x41060f
mov edx, dword [eax + 8]
mov eax, dword [esi + 8]
push 5
push 0
push 0
push edx
push 0
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
pop esi
pop ebx
add esp, 0x134
ret
mov ecx, dword [esi + 0xc]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x1032
push ecx
call edi
mov ebx, eax
cmp ebx, 1
jl 0x41060f
push 0x7f02
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
cmp ebx, 1
mov dword [esp + 0xc], eax
jle 0x41048d
mov ecx, esi
call fcn.00410620
mov edx, dword [esp + 0xc]
push edx
call dword [sym.imp.USER32.dll_SetCursor]
pop edi
pop esi
pop ebx
add esp, 0x134
ret
mov eax, dword [esi + 0xc]
push 1
push 0xffffffffffffffff
push 0x100c
push eax
call edi
cmp eax, 0xffffffff
jne 0x4104a5
xor ecx, ecx
jmp 0x4104d7
mov edx, dword [esi + 0xc]
lea ecx, [esp + 0x10]
push ecx
push 0
push 0x1005
push edx
mov dword [esp + 0x20], 4
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0
call edi
mov ecx, eax
mov eax, dword [esp + 0x30]
neg ecx
sbb ecx, ecx
and ecx, eax
test ecx, ecx
je 0x41060f
mov eax, dword [ecx + 0xc]
test eax, eax
mov eax, dword [ecx + 8]
je 0x410524
cmp eax, 2
jne 0x4104fa
mov ecx, esi
call fcn.00411900
jmp 0x410604
lea eax, [esp + 0x38]
push 1
lea edx, [esi + 0x20c]
push eax
push edx
call fcn.00424820
push 0
push 0
lea eax, [esp + 0x40]
push 1
push eax
mov ecx, esi
call fcn.004174b0
jmp 0x410604
test eax, eax
jne 0x410604
mov eax, dword [esi + 0x994]
test eax, eax
jne 0x4105fd
mov eax, dword [ecx + 0x3c]
test eax, eax
jge 0x4105fd
call fcn.004247f0
test eax, eax
jne 0x4105fd
mov eax, dword [esi + 0x950]
test eax, eax
je 0x410604
mov ecx, esi
call fcn.0041c220
mov eax, dword [esi + 0x48c]
mov ecx, dword [esi + 0x45c]
cmp eax, ecx
jge 0x410588
test eax, eax
jl 0x410588
mov ecx, dword [esi + 0x458]
mov ebx, dword [ecx + eax*4]
test ebx, ebx
jne 0x41058d
mov ebx, str.Open
mov edx, dword [esi + 0xc]
push 1
push 0xffffffffffffffff
push 0x100c
push edx
call edi
cmp eax, 0xffffffff
je 0x410604
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 4
push eax
push 0
push 0x1005
push ecx
mov dword [esp + 0x28], 0
call edi
test eax, eax
je 0x410604
mov eax, dword [esp + 0x30]
test eax, eax
je 0x410604
mov edx, dword [eax + 0x68]
lea edi, [esi + 0x20c]
push edx
lea eax, [esp + 0x3c]
push edi
push eax
call fcn.0044a2d0
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x48]
push edi
push ecx
push edx
call fcn.00404ed0
add esp, 0x1c
jmp 0x410604
mov ecx, esi
call fcn.00410620
mov eax, dword [esp + 0xc]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
pop edi
pop esi
pop ebx
add esp, 0x134
ret