Function at 0x41489e
Capabilities:
Create process on windows

Disassembly:
push 0x28
mov eax, 0x52f691
call fcn.004f41c4
mov edi, ecx
xor esi, esi
mov dword [ebp - 0x18], esi
call fcn.004b9d18
push eax
lea ecx, [ebp - 0x14]
call fcn.00401276
mov dword [ebp - 4], esi
call fcn.004b9d18
push eax
lea ecx, [ebp - 0x1c]
call fcn.00401276
push 2
push 0xffffffffffffffff
push 0x100c
push dword [edi + 0x21c]
mov byte [ebp - 4], 1
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [edi + 0x1fc]
call fcn.004cd14a
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.0040dab3
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.0040104c
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], esi
je 0x414b4c
push 7
pop esi
push esi
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x14]
call fcn.00412cd0
mov eax, dword [eax]
push esi
xor ebx, ebx
push 0x5443c8
inc ebx
push eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], ebx
call fcn.004f5d18
add esp, 0xc
test eax, eax
je 0x414a41
push 8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x14]
call fcn.00412cd0
mov eax, dword [eax]
push 3
pop ebx
push 8
push str.https:__
push eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x18], ebx
call fcn.004f5d18
add esp, 0xc
test eax, eax
je 0x414a41
push 6
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x14]
call fcn.00412cd0
mov eax, dword [eax]
push 6
push 0x5443b4
mov ebx, esi
push eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x18], ebx
call fcn.004f5d18
add esp, 0xc
test eax, eax
je 0x414a41
push esi
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.00412cd0
mov eax, dword [eax]
push 0xf
pop ebx
push esi
push str.file:__
push eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x18], ebx
call fcn.004f5d18
add esp, 0xc
test eax, eax
je 0x414a41
push esi
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x14]
call fcn.00412cd0
mov eax, dword [eax]
push 0x1f
pop ebx
push esi
push str.news:__
push eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x18], ebx
call fcn.004f5d18
add esp, 0xc
test eax, eax
je 0x414a41
push esi
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x14]
call fcn.00412cd0
mov eax, dword [eax]
push 0x3f
pop ebx
push esi
push str.nntp:__
push eax
call fcn.004f5d18
add esp, 0xc
mov byte [ebp - 0xd], 1
test eax, eax
jne 0x414a45
mov byte [ebp - 0xd], 0
test bl, 0x20
je 0x414a58
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
and ebx, 0xffffffdf
call fcn.0040104c
test bl, 0x10
je 0x414a6b
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
and ebx, 0xffffffef
call fcn.0040104c
test bl, 8
je 0x414a7e
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
and ebx, 0xfffffff7
call fcn.0040104c
test bl, 4
je 0x414a91
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
and ebx, 0xfffffffb
call fcn.0040104c
test bl, 2
je 0x414aa4
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
and ebx, 0xfffffffd
call fcn.0040104c
xor esi, esi
inc esi
mov dword [ebp - 4], esi
test bl, 1
je 0x414aba
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.0040104c
cmp byte [ebp - 0xd], 0
je 0x414ae8
push 0x5443c8
lea ecx, [ebp - 0x1c]
call fcn.00401504
mov eax, dword [ebp - 0x14]
push dword [eax - 0xc]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00401486
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x14]
call fcn.0040dab3
mov eax, dword [edi + 0x20]
push esi
push 0
push 0
push dword [ebp - 0x14]
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, eax
cmp esi, 0x20
ja 0x414b4c
push 0x113
mov ecx, 0x598978
call fcn.0045a895
push eax
lea ecx, [ebp - 0x14]
call fcn.00401504
push 0x5416b4
lea ecx, [ebp - 0x14]
call fcn.0040153c
push esi
call fcn.00405fe8
pop ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.0040153c
push dword [ebp - 0x14]
mov eax, dword [edi + 0x20]
push 0x16
push eax
call fcn.004065bc
add esp, 0xc
mov ecx, edi
call fcn.00413b83
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x1c]
and dword [eax], 0
add ecx, 0xfffffff0
call fcn.0040104c
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0040104c
call fcn.004f429c
ret 8