Function at 0x4183cb
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x1334
call fcn.00441db0
mov eax, dword [0x514d34]
xor eax, esp
mov dword [esp + 0x1330], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x1344]
lea eax, [esp + 0x1fc]
push edi
push 0x519
push eax
call fcn.0041bdb6
lea eax, [esp + 0x208]
push eax
call fcn.0040c454
add esp, 0xc
test ax, ax
jne 0x41847b
lea eax, [esp + 0x200]
push eax
call fcn.0040e0d1
pop ecx
lea eax, [esp + 0x200]
push 5
push eax
call fcn.00447230
pop ecx
lea ecx, [esp + 0x204]
add eax, ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call fcn.0045b214
lea eax, [esp + 0x20c]
push 0x5c
push eax
call fcn.0040970e
lea eax, [esp + 0x214]
push eax
call fcn.0040c454
add esp, 0x18
test ax, ax
jne 0x41847b
lea eax, [esp + 0x200]
push eax
call fcn.0045c624
pop ecx
push 0x65
lea eax, [esp + 0x19c]
push eax
mov eax, dword [0x50d234]
push dword [eax]
call fcn.00417596
lea eax, [esp + 0x1a4]
push eax
lea eax, [esp + 0x210]
push eax
call fcn.00446fa0
lea eax, [esp + 0x214]
push 0x4c8c74
push eax
call fcn.00446fa0
add esp, 0x1c
test esi, esi
je 0x4184cf
lea eax, [esp + 0x200]
push esi
push eax
call fcn.00446f90
pop ecx
pop ecx
lea eax, [esp + 0x178]
push str.axis_diplomat
push eax
call fcn.00446f90
cmp word [0x52eca4], 0
pop ecx
pop ecx
je 0x4185f9
mov eax, dword [0x52f294]
add eax, 0x1c
push eax
lea eax, [esp + 0x204]
push eax
call fcn.00447146
pop ecx
pop ecx
test eax, eax
je 0x4185a1
lea eax, [esp + 0x200]
push eax
call fcn.0040cc97
movzx eax, ax
pop ecx
test ax, ax
je 0x418553
mov ecx, 0xa8d
cmp ax, cx
je 0x418553
lea ecx, [esp + 0x200]
push ecx
push eax
call fcn.0040cb9c
pop ecx
push eax
push str._str__when_deleting_existing_destination_file__str___the_file_may_already_be_open_.
call fcn.00413979
add esp, 0xc
jmp 0x4185dc
mov eax, dword [0x52f294]
lea ecx, [esp + 0x200]
push 0x4000
add eax, 0x1c
push ecx
push eax
call fcn.0045cd47
movzx ecx, ax
add esp, 0xc
test cx, cx
je 0x4185a1
mov eax, dword [0x52f294]
lea edx, [esp + 0x200]
push edx
add eax, 0x1c
push eax
push ecx
call fcn.0040cb9c
pop ecx
push eax
push str._str__copying__str__to__str_
call fcn.00413979
add esp, 0x10
jmp 0x4185dc
cmp word [esp + 0x134c], 0
je 0x4185dc
push 0xa
xor ebx, ebx
lea eax, [esp + 0x204]
push ebx
push ebx
push eax
mov eax, dword [0x52cc1c]
push str.open
push dword [eax]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jge 0x4185dc
push str.Unable_to_open_PDF_file
call fcn.00413845
pop ecx
xor eax, eax
inc eax
cmp word [esp + 0x1350], 0
je 0x418ffd
mov word [0x52d7f4], ax
jmp 0x418ffd
xor ebx, ebx
push str.AXIS_Report_File
mov byte [0x532180], bl
call fcn.00447230
movzx eax, ax
add eax, 2
push eax
push dword [0x52d814]
call fcn.0040d754
push 0x59
push 0x5326f8
push dword [0x52d814]
call fcn.0040d044
add esp, 0x18
test ax, ax
je 0x418647
push str.Invalid_AXR_File
call fcn.00413845
pop ecx
jmp 0x418ffb
push 0x42
pop ebp
cmp word [0x5326fe], bx
jne 0x41865a
mov word [0x5326fe], bp
push 0x5326a0
push str.Courier_New
push str.font
push str.printing
push ebx
push 1
mov dword [0x532170], ebx
mov dword [0x532174], ebx
call fcn.00463f23
add esp, 0x18
mov dword [0x532178], ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
mov byte [0x53216c], 1
test eax, eax
jns 0x4186a4
push str.OLE_initialization_error
jmp 0x41863c
mov esi, dword [sym.imp.ole32.dll_CLSIDFromProgID]
lea eax, [esp + 0x98]
push eax
push str.PDFCreatorPilot3.PDFDocument3
call esi
test eax, eax
lea eax, [esp + 0x98]
js 0x4186d0
push 0x532170
push 0x4c8c3c
jmp 0x4186f1
push eax
push str.PDFCreatorPilot2.piPDFDocument
call esi
test eax, eax
js 0x418ff5
push 0x532174
push 0x4c8c4c
lea eax, [esp + 0xa0]
push 0x17
push ebx
push eax
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x418fea
cmp dword [0x532170], ebx
jne 0x418759
cmp dword [0x532174], ebx
je 0x418fea
push ecx
mov ecx, esp
push str.FCG5Y_TDCVS_5RVE4_ZC55Z_422X5
call fcn.00417300
push ecx
mov ecx, esp
push str.conrad_systemsaxis.co.uk
call fcn.00417300
mov ecx, dword [0x532174]
call fcn.00417d24
push ecx
lea eax, [esp + 0x204]
mov ecx, esp
push eax
call fcn.00417300
mov ecx, dword [0x532174]
call fcn.00417bba
jmp 0x418799
push ecx
mov ecx, esp
push str.PJATN_EXPGV_LFWBX_HUNU9
call fcn.00417300
push ecx
mov ecx, esp
push str.conrad_systemsaxis.co.uk
call fcn.00417300
mov ecx, dword [0x532170]
call fcn.00417cb2
push ecx
lea eax, [esp + 0x204]
mov ecx, esp
push eax
call fcn.00417300
mov ecx, dword [0x532170]
call fcn.00417b73
lea eax, [esp + 0x200]
push eax
call fcn.0040d5d3
pop ecx
test ax, ax
je 0x4187e3
lea eax, [esp + 0x200]
push eax
call fcn.0040cc97
movzx eax, ax
pop ecx
test ax, ax
je 0x4187e3
push eax
call fcn.0040cb9c
push eax
lea eax, [esp + 0x208]
push eax
push str.Error_deleting__str_____str_
call fcn.00413979
add esp, 0x10
jmp 0x418ffb
mov ecx, dword [0x532170]
push 0x50
pop esi
test ecx, ecx
je 0x4187fe
push dword [esp + 0x134c]
call fcn.00417a06
jmp 0x418818
mov ecx, dword [0x532174]
test ecx, ecx
je 0x41891f
push dword [esp + 0x134c]
call fcn.00417a2a
cmp dword [0x532170], ebx
je 0x41889e
push ecx
lea eax, [esp + 0x17c]
mov ecx, esp
push eax
call fcn.00417300
mov ecx, dword [0x532170]
call fcn.00417a4e
push ecx
lea eax, [esp + 0x19c]
mov ecx, esp
push eax
call fcn.00417300
mov ecx, dword [0x532170]
call fcn.00417ae2
mov ecx, dword [0x532170]
call fcn.00417452
movzx eax, word [0x5326fc]
imul eax, eax, 0x258
mov ecx, dword [0x532170]
cdq
idiv esi
push eax
call fcn.00417c46
movzx eax, word [0x5326fe]
imul eax, eax, 0x320
mov ecx, dword [0x532170]
cdq
idiv ebp
push eax
call fcn.00417c01
jmp 0x41891f
cmp dword [0x532174], ebx
je 0x41891f
push ecx
lea eax, [esp + 0x17c]
mov ecx, esp
push eax
call fcn.00417300
mov ecx, dword [0x532174]
call fcn.00417a98
push ecx
lea eax, [esp + 0x19c]
mov ecx, esp
push eax
call fcn.00417300
mov ecx, dword [0x532174]
call fcn.00417b2c
mov ecx, dword [0x532174]
call fcn.00417473
movzx eax, word [0x5326fc]
imul eax, eax, 0x258
mov ecx, dword [0x532174]
cdq
idiv esi
push eax
call fcn.00417c67
movzx eax, word [0x5326fe]
imul eax, eax, 0x320
mov ecx, dword [0x532174]
cdq
idiv ebp
push eax
call fcn.00417c22
call fcn.00418152
push 0x5311a0
push 5
push str.Producing_Page
push 0x1c
push 0x28
push str.LXPREP.AVI
push ebx
push 0x106
push str.Producing_PDF_File
mov eax, 0xffff
push eax
push eax
push eax
push str.Abandon_report_
call fcn.0047caca
add esp, 0x34
lea ecx, [esp + 0x44]
call fcn.00466577
lea ecx, [esp + 0x30]
call fcn.00466577
push 2
lea eax, [esp + 0x18]
mov esi, ebx
push eax
push dword [0x52d814]
mov ebp, ebx
mov dword [esp + 0x38], esi
mov dword [esp + 0x2c], ebp
call fcn.0040d044
add esp, 0xc
test ax, ax
jne case.default.0x4189a9
mov edi, 0x532180
movzx eax, word [esp + 0x14]
dec eax
cmp eax, 0xb
ja case.default.0x4189a9
jmp dword [eax*4 + 0x419017]
push 4
lea eax, [esp + 0x20]
push eax
push dword [0x52d814]
call fcn.0040d044
add esp, 0xc
test ax, ax
jne case.default.0x4189a9
movzx eax, word [esp + 0x1e]
push eax
lea eax, [esp + 0x720]
push eax
push dword [0x52d814]
call fcn.0040d044
add esp, 0xc
test ax, ax
jne case.default.0x4189a9
xor ecx, ecx
mov eax, ebx
mov edi, ebx
mov dword [esp + 0x18], eax
mov esi, ebx
cmp cx, word [esp + 0x1e]
jae 0x418af6
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x34]
call fcn.0047833e
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x34]
call fcn.00440e34
mov ebp, dword [esp + 0x7c]
cmp ebp, dword [eax + 8]
je 0x418a4d
lea eax, [esp + 0x80]
inc ebp
push eax
lea ecx, [esp + 0x34]
call fcn.00440e34
cmp ebp, dword [eax + 8]
jne 0x418a32
mov dword [esp + 0x7c], ebp
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x48]
call fcn.0047833e
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x48]
call fcn.00440e34
mov ebp, dword [esp + 0x60]
jmp 0x418adc
lea ecx, [esp + 0x58]
call fcn.00417378
mov ecx, eax
mov dword [esp + 0x10], ecx
movzx eax, word [ecx + 4]
cmp ax, si
je 0x418aa0
movzx edx, word [ecx + 6]
add edx, eax
movzx ecx, si
cmp edx, ecx
jne 0x418ac6
mov ecx, dword [esp + 0x10]
cmp ax, si
jne 0x418aa4
mov eax, dword [ecx]
jmp 0x418aa6
mov eax, ebx
push eax
push dword [esp + 0x24]
lea eax, [esp + 0x724]
push edi
push dword [esp + 0x24]
push eax
call fcn.00417e15
add esp, 0x14
add dword [esp + 0x18], edi
mov edi, ebx
lea eax, [esp + 0x8c]
inc ebp
push eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x64], ebp
call fcn.00440e34
cmp ebp, dword [eax + 8]
jne 0x418a72
inc esi
inc edi
cmp si, word [esp + 0x1e]
jb 0x418a0a
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
push ebx
push ebp
push edi
push eax
lea eax, [esp + 0x72c]
push eax
call fcn.00417e15
movzx eax, word [esp + 0x30]
lea ecx, [esp + 0x44]
add esp, 0x14
add ebp, eax
mov dword [esp + 0x20], ebp
call fcn.00417dbe
lea ecx, [esp + 0x44]
call fcn.00417dbe
mov edi, 0x532180
jmp case.0x4189a9.8
test esi, esi
je 0x418bda
mov ecx, dword [0x532170]
test ecx, ecx
je 0x418b88
call fcn.004175e3
movzx eax, word [0x5326fc]
imul eax, eax, 0x258
push 0x50
pop ecx
cdq
idiv ecx
mov ecx, dword [0x532170]
push eax
call fcn.00417c46
movzx eax, word [0x5326fe]
imul eax, eax, 0x320
push 0x42
pop ecx
cdq
idiv ecx
mov ecx, dword [0x532170]
push eax
call fcn.00417c01
jmp 0x418bd5
mov ecx, dword [0x532174]
test ecx, ecx
je 0x418bd5
call fcn.00417607
movzx eax, word [0x5326fc]
imul eax, eax, 0x258
push 0x50
pop ecx
cdq
idiv ecx
mov ecx, dword [0x532174]
push eax
call fcn.00417c67
movzx eax, word [0x5326fe]
imul eax, eax, 0x320
push 0x42
pop ecx
cdq
idiv ecx
mov ecx, dword [0x532174]
push eax
call fcn.00417c22
call fcn.00418152
cmp byte [0x532180], bl
je 0x418c9e
cmp dword [0x52f7b4], ebx
jne 0x418c9e
mov ecx, dword [0x532170]
xorps xmm0, xmm0
push ecx
push ecx
movsd qword [esp], xmm0
test ecx, ecx
je 0x418c50
call fcn.004174dc
push ecx
push ecx
mov ecx, dword [0x532170]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.00417539
mov ecx, dword [0x532170]
sub esp, 0x18
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [esp], xmm0
push dword [0x532168]
call fcn.0041785b
jmp 0x418c9e
mov ecx, dword [0x532174]
call fcn.00417509
push ecx
push ecx
mov ecx, dword [0x532174]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.00417566
mov ecx, dword [0x532174]
sub esp, 0x18
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [esp], xmm0
push dword [0x532168]
call fcn.004178c1
inc esi
mov ebp, ebx
push esi
push str._dword__5
push 0x5311a0
mov dword [esp + 0x38], esi
mov dword [esp + 0x2c], ebp
call fcn.0047cb00
add esp, 0xc
test ax, ax
je case.0x4189a9.8
call fcn.004180c7
lea ecx, [esp + 0x30]
call fcn.0041734a
lea ecx, [esp + 0x44]
call fcn.0041734a
xor eax, eax
inc eax
jmp 0x418ffd
push 0xc2
lea eax, [esp + 0xb8]
push eax
push dword [0x52d814]
call fcn.0040d044
add esp, 0xc
jmp case.0x4189a9.8
mov dword [0x532178], 1
call fcn.00418152
jmp case.0x4189a9.8
mov dword [0x532178], 2
jmp 0x418d0e
mov dword [0x532178], ebx
jmp 0x418d0e
cmp byte [0x532180], bl
je 0x418d3b
push edi
call fcn.0040cc97
pop ecx
push 4
lea eax, [esp + 0x28]
push eax
push dword [0x52d814]
call fcn.0040d044
add esp, 0xc
cmp dword [esp + 0x24], ebx
je 0x418e05
lea eax, [esp + 0x28]
push eax
push ebx
push edi
call fcn.0040cd7f
mov eax, dword [esp + 0x30]
add esp, 0xc
mov esi, ebx
test eax, eax
je 0x418dcb
mov edx, 0x5dc
sub eax, esi
mov ecx, edx
cmp eax, edx
cmovbe ecx, eax
lea eax, [esp + 0xd64]
push ecx
push eax
push dword [0x52d814]
call fcn.0040d044
mov ecx, dword [esp + 0x30]
mov edx, 0x5dc
sub ecx, esi
mov eax, edx
cmp ecx, edx
cmovbe eax, ecx
push eax
lea eax, [esp + 0xd74]
push eax
push dword [esp + 0x3c]
call fcn.0040d07a
mov eax, dword [esp + 0x3c]
mov edx, 0x5dc
add esi, edx
add esp, 0x18
cmp esi, eax
jb 0x418d78
push dword [esp + 0x28]
call fcn.0040cd10
lea eax, [esp + 0x84c]
push edi
push eax
call fcn.00446f90
push str..jpg
push edi
call fcn.00446fa0
lea eax, [esp + 0x85c]
push edi
push eax
call fcn.0040d468
mov al, byte [0x532180]
add esp, 0x1c
jmp 0x418e0c
mov al, bl
mov byte [0x532180], al
test al, al
je case.0x4189a9.8
cmp dword [0x52f7b4], ebx
jne case.0x4189a9.8
cmp dword [0x532170], ebx
je 0x418eac
push 1
push ecx
mov ecx, esp
push edi
call fcn.00417300
mov ecx, dword [0x532170]
call fcn.004173a0
mov dword [0x532168], eax
test ebp, ebp
jne case.0x4189a9.8
push ecx
push ecx
mov ecx, dword [0x532170]
xorps xmm0, xmm0
movsd qword [esp], xmm0
call fcn.004174dc
push ecx
push ecx
mov ecx, dword [0x532170]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.00417539
mov ecx, dword [0x532170]
sub esp, 0x18
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [esp], xmm0
push dword [0x532168]
call fcn.0041785b
jmp case.0x4189a9.8
cmp dword [0x532174], ebx
je case.0x4189a9.8
push 1
push ecx
mov ecx, esp
push edi
call fcn.00417300
mov ecx, dword [0x532174]
call fcn.004173f9
mov dword [0x532168], eax
test ebp, ebp
jne case.0x4189a9.8
push ecx
push ecx
mov ecx, dword [0x532174]
xorps xmm0, xmm0
movsd qword [esp], xmm0
call fcn.00417509
push ecx
push ecx
mov ecx, dword [0x532174]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.00417566
mov ecx, dword [0x532174]
sub esp, 0x18
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [esp], xmm0
push dword [0x532168]
call fcn.004178c1
jmp case.0x4189a9.8
push 0xc
lea eax, [esp + 0xac]
jmp 0x418cf0
push 8
lea eax, [esp + 0x68]
push eax
push dword [0x52d814]
call fcn.0040d044
lea eax, [esp + 0x70]
lea ecx, [esp + 0x50]
jmp 0x418f79
push 8
lea eax, [esp + 0x70]
push eax
push dword [0x52d814]
call fcn.0040d044
lea eax, [esp + 0x78]
lea ecx, [esp + 0x3c]
add esp, 0xc
push eax
call fcn.0043d9eb
push 2
lea eax, [esp + 0x18]
push eax
push dword [0x52d814]
call fcn.0040d044
add esp, 0xc
test ax, ax
jne case.default.0x4189a9
mov esi, dword [esp + 0x2c]
jmp 0x41899a
xor ebx, ebx
inc ebx
mov word [0x52d7f4], bx
call fcn.004180c7
lea ecx, [esp + 0x30]
call fcn.0041734a
lea ecx, [esp + 0x44]
call fcn.0041734a
mov ax, bx
jmp 0x418ffd
call fcn.0041813f
lea ecx, [esp + 0x30]
movzx esi, ax
call fcn.0041734a
lea ecx, [esp + 0x44]
call fcn.0041734a
mov ax, si
jmp 0x418ffd
push str.Cant_create_PDF_Creator_Pilot_object
call fcn.00413845
pop ecx
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov ecx, dword [esp + 0x1340]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00441a5e
add esp, 0x1334
ret