Function at 0x413ffd
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
push edi
mov dword [esi + 8], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x482424], eax
mov eax, dword [0x4818ec]
xor ebx, ebx
cmp eax, ebx
jle 0x4140cd
cmp eax, 0x65
jge 0x4140cd
cmp dword [0x4818f0], ebx
jne 0x414045
cmp dword [0x4818f4], ebx
je 0x4140cd
cmp eax, ebx
mov dword [0x481908], ebx
mov dword [0x48190c], ebx
mov dword [ebp - 4], ebx
jle 0x4140cd
mov dword [ebp + 8], ebx
mov ecx, dword [ebp + 8]
xor eax, eax
lea edi, [ebp - 0x10]
mov dword [ebp - 0x14], ebx
stosd dword es:[edi], eax
mov eax, dword [0x4818e8]
mov edi, 0x4810c0
add ecx, eax
push ecx
mov ecx, edi
call fcn.0041cf5a
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x14]
push eax
mov eax, dword [0x4818e8]
add ecx, eax
call fcn.0041f593
push eax
mov ecx, 0x482380
call fcn.0041184b
mov eax, dword [ebp - 0x14]
cmp eax, dword [0x481908]
jle 0x4140a9
mov dword [0x481908], eax
mov eax, dword [ebp - 0x10]
cmp eax, dword [0x48190c]
jle 0x4140b9
mov dword [0x48190c], eax
inc dword [ebp - 4]
add dword [ebp + 8], 0xc
mov eax, dword [ebp - 4]
cmp eax, dword [0x4818ec]
jl 0x41405b
jmp 0x4140d2
mov edi, 0x4810c0
cmp byte [0x4823f4], bl
je 0x414144
call fcn.00426788
call fcn.00426805
call fcn.004268c3
call fcn.004268f3
call fcn.00426923
call fcn.00426953
call fcn.00426a10
call fcn.00426bd3
call fcn.00426ced
call fcn.00426e07
call fcn.00426ec5
mov ecx, edi
call fcn.0041b917
cmp byte [0x4823f4], bl
je 0x414144
mov eax, dword [0x4817ac]
cmp eax, dword [0x4817a4]
jb 0x414144
ja 0x4141d3
mov eax, dword [0x4817a8]
cmp eax, dword [0x4817a0]
ja 0x4141d3
cmp dword [0x481450], 3
jbe 0x41416c
cmp dword [0x481764], ebx
jne 0x41416c
push ebx
mov ecx, 0x481450
call fcn.0041f593
push eax
call fcn.0040ed76
pop ecx
test al, al
pop ecx
je 0x4141d3
mov ecx, edi
call fcn.0041cddc
push ebx
push ebx
mov ecx, esi
mov dword [0x4817b0], 1
call fcn.00416b01
mov ecx, esi
call fcn.004138d7
test al, al
je 0x4141d3
push 2
pop eax
test byte [0x4812a4], al
je 0x4141ac
mov ecx, esi
mov dword [0x4817b0], eax
call fcn.00411e46
test al, al
je 0x4141d3
test byte [0x4812a4], 4
je 0x4141da
push ebx
push ebx
mov ecx, esi
mov dword [0x4817b0], 3
call fcn.00416b01
mov ecx, esi
call fcn.00411b44
test al, al
jne 0x4141da
xor al, al
jmp 0x4144b4
cmp byte [0x4823f4], bl
mov dword [0x4817b0], 4
jne 0x41420a
mov ecx, 0x482048
call fcn.0041f593
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.004213b9
pop ecx
pop ecx
push ebx
push ebx
mov ecx, 0x481a08
call fcn.00416b01
push ebx
push ebx
mov ecx, esi
call fcn.00416b01
lea ecx, [ebp - 0x20]
mov byte [0x4819a1], 1
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
call fcn.0041e62f
mov dword [ebp + 8], 0x4814c8
mov eax, dword [ebp + 8]
sub esp, 0xc
mov ecx, esp
mov eax, dword [eax]
mov dword [ebp - 4], eax
lea eax, [ebp - 0x20]
push eax
call fcn.0041e703
lea eax, [ebp - 0xc]
mov ecx, esi
push eax
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
push dword [ebp - 4]
call fcn.0041518e
add dword [ebp + 8], 0x44
cmp dword [ebp + 8], 0x4815d8
jl 0x41423b
cmp dword [ebp - 8], ebx
jle 0x414293
push ebx
mov ecx, 0x482054
call fcn.0041f593
push eax
mov ecx, edi
push dword [esi + 8]
call fcn.0041da57
jmp 0x4144aa
cmp byte [0x4823f4], bl
mov dword [0x4817b0], 5
jne 0x4142c3
mov ecx, 0x482060
call fcn.0041f593
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.004213b9
pop ecx
pop ecx
push ebx
push ebx
mov ecx, esi
call fcn.00416b01
mov ecx, esi
call fcn.00415006
test al, al
jne 0x4142ed
push ebx
mov ecx, 0x48206c
call fcn.0041f593
push eax
mov ecx, edi
push dword [esi + 8]
call fcn.0041da57
cmp byte [0x4823f4], bl
mov dword [0x4817b0], 6
jne 0x41431d
mov ecx, 0x482078
call fcn.0041f593
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.004213b9
pop ecx
pop ecx
push ebx
push ebx
mov ecx, esi
call fcn.00416b01
mov ecx, esi
call fcn.00414bff
cmp byte [0x4823f4], bl
mov dword [0x4817b0], 7
jne 0x41435d
mov ecx, 0x482084
call fcn.0041f593
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.004213b9
pop ecx
pop ecx
push ebx
push ebx
mov ecx, esi
call fcn.00416b01
mov ecx, esi
call fcn.00412140
test al, al
jne 0x414387
push ebx
mov ecx, 0x482090
call fcn.0041f593
push eax
mov ecx, edi
push dword [esi + 8]
call fcn.0041da57
cmp byte [0x4823f4], bl
mov dword [0x4817b0], 8
jne 0x4143b7
mov ecx, 0x48209c
call fcn.0041f593
push eax
push 0x14
push dword [esi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.004213b9
pop ecx
pop ecx
push ebx
push ebx
mov ecx, esi
call fcn.00416b01
push 0x481690
mov ecx, esi
call fcn.00415b5a
push dword [esi + 8]
mov ecx, 0x481910
call fcn.00425e4e
test al, al
je 0x4144aa
push ebx
push 0x64
mov ecx, esi
call fcn.00416b01
cmp dword [0x481764], ebx
jne 0x414432
cmp dword [0x4815e8], ebx
mov eax, dword [0x4812a8]
jg 0x414407
test eax, 0x20000
jne 0x414432
cmp byte [0x4823f4], bl
jne 0x414483
test eax, 0x10000
je 0x41443a
push 1
push 0x4311c8
push ebx
mov ecx, esi
call fcn.004132be
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp byte [0x4823f4], bl
jne 0x414483
mov ecx, 0x482380
call fcn.004113d6
push dword [0x481290]
call dword [sym.imp.USER32.dll_GetDC]
push 0xcc0020
push ebx
push ebx
mov esi, eax
push dword [0x48129c]
push dword [0x48128c]
push dword [0x481288]
push ebx
push ebx
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
push esi
push dword [0x481290]
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x414492
call fcn.00426ef5
call fcn.00426f25
call fcn.00426fd6
cmp dword [0x481764], ebx
jne 0x4144a8
push ebx
push ebx
push ebx
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov bl, 1
lea ecx, [ebp - 0x20]
call fcn.0041e765
mov al, bl
pop edi
pop esi
pop ebx
leave
ret 4