Function at 0x4169b1
Capabilities:
Create process on windows

Disassembly:
push 0x13c
mov eax, 0x49f7e9
call fcn.0047b15e
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x104], eax
cmp dword [eax + 0x10], ebx
jne 0x4169dd
xor al, al
jmp 0x416db1
xor eax, eax
push str.http_shellopencommand
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004073ca
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x2c]
lea esi, [ebp - 0xf8]
call fcn.004173a1
mov byte [ebp - 4], 2
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x2c]
call fcn.004018e2
xor eax, eax
push 0x4b2cb8
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x50], 7
mov dword [ebp - 0x54], ebx
mov word [ebp - 0x64], ax
call fcn.004073ca
mov byte [ebp - 4], 3
mov eax, esi
push eax
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x80]
call fcn.004173d5
mov byte [ebp - 4], 5
push ebx
push edi
lea ecx, [ebp - 0x64]
call fcn.004018e2
cmp dword [ebp - 0x6c], 8
mov eax, dword [ebp - 0x80]
jae 0x416a65
lea eax, [ebp - 0x80]
push eax
call dword [0x4a62dc]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00407327
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0xa8]
lea esi, [ebp - 0x9c]
push eax
push ebx
lea eax, [ebp - 0x80]
push eax
call fcn.0040446d
mov byte [ebp - 4], 7
push edi
lea eax, [ebp - 0x100]
push eax
mov eax, esi
mov dword [ebp - 0x100], 0x22
call fcn.004046d7
mov dword [ebp - 0x100], eax
call fcn.00416f13
mov esi, eax
xor eax, eax
push 0xffffffffffffffff
mov word [ebp - 0x48], ax
push ebx
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
call fcn.0040181f
mov byte [ebp - 4], 8
cmp esi, 0xffffffff
je 0x416b2c
mov eax, dword [ebp - 0x100]
cmp eax, 0xffffffff
je 0x416b2c
cmp eax, esi
je 0x416b2c
sub esi, eax
dec esi
push esi
inc eax
push eax
lea eax, [ebp - 0x9c]
push eax
lea esi, [ebp - 0xd4]
call fcn.0040446d
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x48]
call fcn.00401f12
mov byte [ebp - 4], 8
push ebx
push edi
mov ecx, esi
call fcn.004018e2
cmp dword [ebp - 0x38], ebx
je 0x416b63
cmp dword [ebp - 0x34], 8
mov eax, dword [ebp - 0x48]
jae 0x416b3d
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00407327
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x2c]
mov dword [ebp - 0xfc], edi
call fcn.0041691f
mov byte [ebp - 0xf1], 1
cmp eax, edi
je 0x416b69
mov byte [ebp - 0xf1], bl
mov dword [ebp - 4], 8
test byte [ebp - 0xfc], 1
je 0x416b8a
and dword [ebp - 0xfc], 0xfffffffe
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.004018e2
cmp byte [ebp - 0xf1], bl
je 0x416cd2
lea eax, [ebp - 0x48]
push eax
mov esi, 0x4b35d0
lea eax, [ebp - 0xf0]
push esi
push eax
call fcn.00412c08
add esp, 0xc
mov byte [ebp - 4], 0xb
push esi
mov ecx, eax
call fcn.00401000
push eax
lea ecx, [ebp - 0xd4]
call fcn.00401d27
mov byte [ebp - 4], 0xc
push 0x4b2928
lea ecx, [ebp - 0xd4]
call fcn.00401000
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401d27
mov byte [ebp - 4], 0xe
push ebx
push edi
lea ecx, [ebp - 0xd4]
call fcn.004018e2
mov byte [ebp - 4], 0xf
push ebx
push edi
lea ecx, [ebp - 0xf0]
call fcn.004018e2
push 0xffffffffffffffff
push ebx
push dword [ebp - 0x104]
lea ecx, [ebp - 0x2c]
call fcn.004010c8
xor eax, eax
lea edi, [ebp - 0x58]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x44
stosd dword es:[edi], eax
pop esi
push esi
stosd dword es:[edi], eax
lea eax, [ebp - 0x148]
push ebx
push eax
call fcn.0047a8e0
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], 8
mov dword [ebp - 0x148], esi
jae 0x416c46
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x148]
push ecx
push ebx
push ebx
push 0x20
push ebx
push ebx
push ebx
push eax
push ebx
call dword [0x4a6254]
cmp eax, ebx
je 0x416cc0
push dword [ebp - 0x58]
mov esi, dword [0x4a61b8]
call esi
push dword [ebp - 0x54]
call esi
mov byte [ebp - 4], 8
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x2c]
call fcn.004018e2
mov byte [ebp - 4], 7
push ebx
push esi
lea ecx, [ebp - 0x48]
call fcn.004018e2
mov byte [ebp - 4], 6
push ebx
push esi
lea ecx, [ebp - 0x9c]
call fcn.004018e2
mov byte [ebp - 4], 5
push ebx
push esi
lea ecx, [ebp - 0xb8]
call fcn.004018e2
mov byte [ebp - 4], 2
push ebx
push esi
jmp 0x416d8f
mov byte [ebp - 4], 8
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.004018e2
xor edi, edi
inc edi
mov eax, dword [ebp - 0x104]
cmp dword [eax + 0x14], 8
jb 0x416ce0
mov eax, dword [eax]
push 5
push ebx
push eax
push 0x4b4168
push str.open
push ebx
call dword [0x4a62c4]
cmp eax, 0x20
jg 0x416d59
mov byte [ebp - 4], 7
push ebx
push edi
lea ecx, [ebp - 0x48]
call fcn.004018e2
mov byte [ebp - 4], 6
push ebx
push edi
lea ecx, [ebp - 0x9c]
call fcn.004018e2
mov byte [ebp - 4], 5
push ebx
push edi
lea ecx, [ebp - 0xb8]
call fcn.004018e2
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0x80]
call fcn.004018e2
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xf8], ebx
je 0x4169d6
push dword [ebp - 0xf8]
call dword [0x4a6020]
jmp 0x4169d6
mov byte [ebp - 4], 7
push ebx
push edi
lea ecx, [ebp - 0x48]
call fcn.004018e2
mov byte [ebp - 4], 6
push ebx
push edi
lea ecx, [ebp - 0x9c]
call fcn.004018e2
mov byte [ebp - 4], 5
push ebx
push edi
lea ecx, [ebp - 0xb8]
call fcn.004018e2
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0x80]
call fcn.004018e2
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xf8], ebx
je 0x416daf
push dword [ebp - 0xf8]
call dword [0x4a6020]
mov al, 1
call fcn.0047b1e1
ret