Function at 0x4d75a4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe88
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
movsx eax, byte [esi]
cmp eax, 0x61
jb 0x4d75c1
sub eax, 0x20
cmp eax, 0x41
jb 0x4d75d1
cmp eax, 0x5a
ja 0x4d75d1
cmp byte [esi + 1], 0x3a
je 0x4d75ef
push 0x2f
push esi
call fcn.004d620c
add esp, 8
test eax, eax
jne 0x4d75ef
push 0x5c
push esi
call fcn.004d620c
add esp, 8
test eax, eax
je 0x4d75f4
xor edx, edx
mov dword [ebp + 0x18], edx
xor ecx, ecx
mov dword [ebp - 0x14], ecx
push 0x5c
push esi
call fcn.004d64d0
add esp, 8
mov edi, eax
test eax, eax
je 0x4d760d
inc edi
jmp 0x4d760f
mov edi, esi
push 0x2e
push edi
call fcn.004d64d0
add esp, 8
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4d7677
mov edx, dword [ebp + 0x18]
lea ecx, [ebp - 0x118]
push edx
push 0x756dc1
push ecx
push esi
call fcn.004d739c
add esp, 0x10
mov edi, eax
test eax, eax
je 0x4d76d6
push 0x756dc2
mov edx, dword [ebp - 0x10]
push edx
call fcn.004d62b4
add esp, 8
test eax, eax
je 0x4d766e
push 0x756dc7
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.004d62b4
add esp, 8
test eax, eax
jne 0x4d76d6
mov dword [ebp - 0x14], 1
jmp 0x4d76d6
mov eax, dword [ebp + 0x18]
lea edx, [ebp - 0x118]
push eax
push str..EXE
push edx
push esi
call fcn.004d739c
add esp, 0x10
mov edi, eax
test eax, eax
jne 0x4d76d6
mov edx, dword [ebp + 0x18]
lea ecx, [ebp - 0x118]
push edx
push str..BAT
push ecx
push esi
call fcn.004d739c
add esp, 0x10
mov edi, eax
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x4d76d6
mov edx, dword [ebp + 0x18]
lea ecx, [ebp - 0x118]
push edx
push str..CMD
push ecx
push esi
call fcn.004d739c
add esp, 0x10
mov edi, eax
mov dword [ebp - 0x14], eax
test edi, edi
je 0x4d76f2
cmp dword [ebp - 0x14], 0
je 0x4d7704
push 0x756ddb
call fcn.004d6be4
pop ecx
mov dword [ebp - 0xc], eax
test eax, eax
jne 0x4d7704
mov dword [0x756c4c], 2
or eax, 0xffffffff
jmp 0x4d79c8
cmp dword [ebp - 0x14], 0
je 0x4d7723
mov edx, dword [ebp + 0x10]
push edx
push 0x756de3
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.004d7454
add esp, 0xc
mov edi, eax
jmp 0x4d773c
mov eax, dword [ebp + 0x10]
add eax, 4
push eax
push 0
mov edx, dword [ebp + 0x10]
mov ecx, dword [edx]
push ecx
call fcn.004d7454
add esp, 0xc
mov edi, eax
test edi, edi
jne 0x4d7752
mov dword [0x756c4c], 8
or eax, 0xffffffff
jmp 0x4d79c8
cmp dword [ebp + 0x14], 0
jne 0x4d775f
xor edx, edx
mov dword [ebp - 8], edx
jmp 0x4d7789
mov ecx, dword [ebp + 0x14]
push ecx
call fcn.004d7540
pop ecx
mov dword [ebp - 8], eax
test eax, eax
jne 0x4d7789
mov dword [0x756c4c], 8
push edi
call fcn.004cec04
pop ecx
or eax, 0xffffffff
jmp 0x4d79c8
call dword [0x756ccc]
push 0x44
push 0
lea edx, [ebp - 0x168]
push edx
call fcn.004cfa5c
add esp, 0xc
mov dword [ebp - 0x168], 0x44
mov word [ebp - 0x138], 0xa
cmp dword [0x755714], 0
je 0x4d77f2
push 0
call dword [0x75570c]
pop ecx
mov esi, eax
mov word [ebp - 0x136], si
movzx eax, si
push eax
call fcn.004cebf4
pop ecx
mov dword [ebp - 0x134], eax
test eax, eax
je 0x4d7770
mov edx, dword [ebp - 0x134]
push edx
call dword [0x75570c]
pop ecx
mov dword [ebp - 0x124], 0xc
xor ecx, ecx
xor esi, esi
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], 1
test bl, 0x20
je 0x4d781a
or esi, 0x10
jmp 0x4d7822
test bl, 0x10
je 0x4d7822
or esi, 8
test bl, 0x40
je 0x4d782d
or esi, 0x200
test bl, 0x80
je 0x4d7835
or esi, 4
test bh, 2
je 0x4d7842
or esi, 0x800
jmp 0x4d784d
test bh, 4
je 0x4d784d
or esi, 0x1000
test bh, 8
je 0x4d7858
or esi, 0x4000000
test bh, 0x20
je 0x4d7862
or esi, 0x20
jmp 0x4d7884
test bh, 0x10
je 0x4d786c
or esi, 0x40
jmp 0x4d7884
test bh, 0x40
je 0x4d7879
or esi, 0x80
jmp 0x4d7884
test bh, 0x80
je 0x4d7884
or esi, 0x100
lea eax, [ebp - 0x178]
lea edx, [ebp - 0x168]
push eax
push edx
push 0
lea eax, [ebp - 0x124]
mov ecx, dword [ebp - 8]
lea edx, [ebp - 0x124]
push ecx
push esi
push 1
push eax
push edx
push edi
cmp dword [ebp - 0x14], 0
je 0x4d78b5
mov ecx, dword [ebp - 0xc]
jmp 0x4d78bb
lea ecx, [ebp - 0x118]
push ecx
call fcn.004da4da
dec eax
je 0x4d7902
call fcn.004da5a0
and eax, 0xffff
dec eax
je 0x4d78e2
sub eax, 7
je 0x4d78e9
sub eax, 0x51
jne 0x4d78f0
mov eax, 0x2a
jmp 0x4d78f5
mov eax, 0x13
jmp 0x4d78f5
mov eax, 8
jmp 0x4d78f5
mov eax, 0x15
mov dword [0x756c4c], eax
or esi, 0xffffffff
jmp 0x4d79b5
cmp ebx, 0x10
jne 0x4d790c
mov ebx, 4
mov eax, ebx
and eax, 7
sub eax, 1
jb 0x4d7923
je 0x4d7968
dec eax
je 0x4d7983
dec eax
sub eax, 2
jb 0x4d7957
jmp 0x4d799c
push 0xffffffffffffffff
mov edx, dword [ebp - 0x178]
push edx
call fcn.004da7bc
lea ecx, [ebp - 4]
push ecx
mov eax, dword [ebp - 0x178]
push eax
call fcn.004da582
test bh, 1
jne 0x4d7952
mov edx, dword [ebp - 0x178]
push edx
call fcn.004da4b6
mov esi, dword [ebp - 4]
jmp 0x4d799f
test bh, 1
jne 0x4d7968
mov eax, dword [ebp - 0x178]
push eax
call fcn.004da4b6
mov edx, dword [ebp - 0x178]
push edx
mov ecx, dword [ebp - 0x170]
push ecx
call dword [0x756db8]
add esp, 8
mov esi, eax
jmp 0x4d799f
mov eax, dword [ebp - 8]
push eax
call fcn.004cec04
pop ecx
push edi
call fcn.004cec04
pop ecx
push 0
call fcn.004d6b94
pop ecx
or esi, 0xffffffff
test bl, 0x80
jne 0x4d79b5
test bh, 1
jne 0x4d79b5
mov eax, dword [ebp - 0x174]
push eax
call fcn.004da4b6
mov edx, dword [ebp - 8]
push edx
call fcn.004cec04
pop ecx
push edi
call fcn.004cec04
pop ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret