Function at 0x4418d0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x820
mov eax, dword [0x4f6fc0]
xor eax, ebp
mov dword [ebp - 4], eax
mov al, byte [0x52607f]
mov byte [ebp - 0x704], al
push 0x1ff
push 0
lea ecx, [ebp - 0x703]
push ecx
call fcn.004b6780
add esp, 0xc
mov dl, byte [0x526080]
mov byte [ebp - 0x304], dl
push 0xfe
push 0
lea eax, [ebp - 0x303]
push eax
call fcn.004b6780
add esp, 0xc
mov cl, byte [0x526081]
mov byte [ebp - 0x104], cl
push 0xfe
push 0
lea edx, [ebp - 0x103]
push edx
call fcn.004b6780
add esp, 0xc
mov al, byte [0x526082]
mov byte [ebp - 0x204], al
push 0xfe
push 0
lea ecx, [ebp - 0x203]
push ecx
call fcn.004b6780
add esp, 0xc
mov dl, byte [0x526083]
mov byte [ebp - 0x404], dl
push 0xfe
push 0
lea eax, [ebp - 0x403]
push eax
call fcn.004b6780
add esp, 0xc
lea ecx, [ebp - 0x104]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004437b0
add esp, 8
mov dword [ebp - 0x808], eax
cmp dword [0x54e958], 1
jne 0x441ab9
cmp dword [ebp - 0x808], 0xffffffff
jne 0x441a28
push 0x5c
push 0x4e34b4
push 0x5c
push 0x526090
push 0x4e34b8
lea eax, [ebp - 0x704]
push eax
call fcn.004b6e08
add esp, 0x18
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x104]
push edx
call fcn.004b5e60
add esp, 8
push 0x4e34c4
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x704]
push ecx
call fcn.00442ff0
add esp, 0xc
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 1
jne 0x441a23
mov dword [ebp - 0x808], 0x3e7
jmp 0x441aab
mov edx, dword [ebp - 0x808]
cmp edx, dword [0x52608c]
jge 0x441a5a
push 0x5c
push 0x4e34c8
push 0x5c
push 0x526090
push 0x4e34cc
lea eax, [ebp - 0x704]
push eax
call fcn.004b6e08
add esp, 0x18
jmp 0x441a7c
push 0x5c
push 0x4e34d8
push 0x5c
push 0x526290
push str._s_c_s_c
lea ecx, [ebp - 0x704]
push ecx
call fcn.004b6e08
add esp, 0x18
mov edx, dword [ebp - 0x808]
imul edx, edx, 0x2fd
add edx, 0x18706ff
push edx
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x704]
push ecx
call fcn.00442ff0
add esp, 0xc
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0
jne 0x441ab9
jmp 0x441f26
cmp dword [ebp - 0x808], 0xffffffff
jne 0x441ada
mov edx, dword [ebp + 8]
push edx
push str.Cant_find_document:__s
push 0
call fcn.004417b0
add esp, 0xc
jmp 0x441f26
mov eax, dword [ebp - 0x808]
cmp eax, dword [0x52608c]
jge 0x441b0a
push 0x4e3500
push 0x5c
push 0x526090
push 0x4e3504
lea ecx, [ebp - 0x204]
push ecx
call fcn.004b6e08
add esp, 0x14
jmp 0x441b2a
push 0x4e350c
push 0x5c
push 0x526290
push 0x4e3510
lea edx, [ebp - 0x204]
push edx
call fcn.004b6e08
add esp, 0x14
cmp dword [ebp - 0x808], 0xfe
jle 0x441b40
mov dword [ebp - 0x808], 0
push 0x4e3518
mov eax, dword [ebp - 0x808]
imul eax, eax, 0x2fd
add eax, 0x18707fe
push eax
call fcn.004b5ff0
add esp, 8
test eax, eax
je 0x441c2e
lea ecx, [ebp - 0x404]
push ecx
call fcn.0049d2c0
add esp, 4
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 1
jne 0x441c2e
mov dl, byte [0x526084]
mov byte [ebp - 0x804], dl
push 0xfe
push 0
lea eax, [ebp - 0x803]
push eax
call fcn.004b6780
add esp, 0xc
lea ecx, [ebp - 0x104]
push ecx
push 0x5c
lea edx, [ebp - 0x204]
push edx
push 0x4e351c
lea eax, [ebp - 0x804]
push eax
call fcn.004b6e08
add esp, 0x14
lea ecx, [ebp - 0x104]
push ecx
push 0x5c
lea edx, [ebp - 0x404]
push edx
push 0x4e3524
lea eax, [ebp - 0x704]
push eax
call fcn.004b6e08
add esp, 0x14
lea ecx, [ebp - 0x804]
push ecx
lea edx, [ebp - 0x704]
push edx
call fcn.0042d100
add esp, 8
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 1
jne 0x441c2e
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x204]
push ecx
call fcn.004b5e60
add esp, 8
cmp dword [0x4e145c], 1
jne 0x441d63
push 0x4e352c
call fcn.004ba5eb
add esp, 4
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 0
je 0x441c98
mov edx, dword [ebp - 0x81c]
push edx
lea eax, [ebp - 0x404]
push eax
call fcn.004b5e60
add esp, 8
push 0x20
lea ecx, [ebp - 0x404]
push ecx
call fcn.004b95a0
add esp, 8
test eax, eax
je 0x441c96
push 0x4e3534
lea edx, [ebp - 0x404]
push edx
call fcn.004b6e08
add esp, 8
jmp 0x441cac
push str.c:windows_temp
lea eax, [ebp - 0x404]
push eax
call fcn.004b6e08
add esp, 8
lea ecx, [ebp - 0x404]
push ecx
lea edx, [ebp - 0x204]
push edx
call fcn.004b68e0
add esp, 8
test eax, eax
jne 0x441cd2
mov dword [ebp - 0x810], 1
jmp 0x441cf7
push 1
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x204]
push ecx
lea edx, [ebp - 0x104]
push edx
call fcn.0049b320
add esp, 0x10
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 1
jne 0x441d5e
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x204]
push ecx
call fcn.004b5e60
add esp, 8
lea edx, [ebp - 0x104]
push edx
push 0x5c
lea eax, [ebp - 0x204]
push eax
push 0x4e3554
lea ecx, [ebp - 0x304]
push ecx
call fcn.004b6e08
add esp, 0x14
push 1
push 0
push 0
lea edx, [ebp - 0x304]
push edx
push 0x4e355c
mov eax, dword [0x18a0254]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x810], eax
jmp 0x441f10
cmp dword [0x4e1450], 0xf
jl 0x441ebb
push 0x22
lea ecx, [ebp - 0x104]
push ecx
push 0x5c
lea edx, [ebp - 0x204]
push edx
push 0x22
push str._c_s_c_s_c
lea eax, [ebp - 0x304]
push eax
call fcn.004b6e08
add esp, 0x1c
push 1
push 0
push 0
lea ecx, [ebp - 0x304]
push ecx
push 0x4e3570
mov edx, dword [0x18a0254]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 0x20
jge 0x441eaa
mov al, byte [0x526085]
mov byte [ebp - 0x504], al
push 0xfe
push 0
lea ecx, [ebp - 0x503]
push ecx
call fcn.004b6780
add esp, 0xc
mov edx, dword [ebp - 0x80c]
push edx
lea eax, [ebp - 0x304]
push eax
push 0x4e3578
push 1
call fcn.004417b0
add esp, 0x10
lea ecx, [ebp - 0x504]
push ecx
call fcn.0049d2c0
add esp, 4
push 1
lea edx, [ebp - 0x504]
push edx
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x104]
push ecx
call fcn.0049b320
add esp, 0x10
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 1
jne 0x441eaa
lea edx, [ebp - 0x104]
push edx
push 0x5c
lea eax, [ebp - 0x504]
push eax
push 0x4e3588
lea ecx, [ebp - 0x304]
push ecx
call fcn.004b6e08
add esp, 0x14
push 1
push 0
push 0
lea edx, [ebp - 0x304]
push edx
push 0x4e3590
mov eax, dword [0x18a0254]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x80c], eax
mov ecx, dword [ebp - 0x80c]
push ecx
lea edx, [ebp - 0x304]
push edx
push str._s___ret_d_
push 1
call fcn.004417b0
add esp, 0x10
mov eax, dword [ebp - 0x80c]
push eax
call fcn.00491ae0
add esp, 4
jmp 0x441f10
push 0x22
lea ecx, [ebp - 0x104]
push ecx
push 0x5c
lea edx, [ebp - 0x204]
push edx
push 0x22
push 0x22
push 0x5506c0
push 0x22
push str._c_s_c__c_s_c_s_c
lea eax, [ebp - 0x304]
push eax
call fcn.004b6e08
add esp, 0x28
push 5
lea ecx, [ebp - 0x304]
push ecx
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x820], eax
mov edx, dword [ebp - 0x820]
push edx
call fcn.00491ae0
add esp, 4
lea eax, [ebp - 0x304]
push eax
push 0x4e35bc
push 1
call fcn.004417b0
add esp, 0xc
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004b6253
mov esp, ebp
pop ebp
ret