Function at 0x41144f
Capabilities:
Create process on windows

Disassembly:
push 0x4d0
mov eax, 0x458198
call fcn.0044730c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x454], eax
xor eax, eax
mov edi, 0x208
push edi
mov word [ebp - 0x224], ax
xor ebx, ebx
lea eax, [ebp - 0x222]
mov esi, ecx
push ebx
push eax
mov dword [ebp - 0x45c], esi
call fcn.00427b40
add esp, 0xc
cmp esi, ebx
je 0x4114d3
lea eax, [ebp - 0x224]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4114af
sub eax, edx
sar eax, 1
mov ecx, 0x104
sub ecx, eax
push ecx
push esi
lea eax, [ebp - 0x224]
push eax
call fcn.0041128f
cmp dword [ebp - 0x458], ebx
je 0x41151d
cmp esi, ebx
je 0x4114eb
lea eax, [ebp - 0x224]
push eax
call fcn.00413535
lea eax, [ebp - 0x224]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4114f4
sub eax, edx
sar eax, 1
mov ecx, 0x104
sub ecx, eax
push ecx
push dword [ebp - 0x458]
lea eax, [ebp - 0x224]
push eax
call fcn.0041128f
cmp esi, ebx
jne 0x41152d
cmp dword [ebp - 0x458], ebx
je 0x4115e4
lea eax, [ebp - 0x224]
push ebx
push eax
call fcn.00422ca6
pop ecx
pop ecx
test eax, eax
je 0x4115e4
push ebx
lea ecx, [ebp - 0x470]
call fcn.0042e933
mov dword [ebp - 4], ebx
push ebx
lea ecx, [ebp - 0x480]
call fcn.0042e933
mov byte [ebp - 4], 1
push 0x4644c0
lea eax, [ebp - 0x480]
push 0x1003
push eax
call fcn.0042e9a1
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x470]
push 0x1047
push eax
call fcn.0042e9a1
mov ecx, dword [ebp - 0x47c]
add esp, 0x18
mov eax, 0x40df5c
cmp ecx, ebx
jne 0x4115a5
mov ecx, eax
cmp dword [ebp - 0x46c], ebx
je 0x4115b3
mov eax, dword [ebp - 0x46c]
push ebx
push ecx
push eax
push ebx
call dword [0x465128]
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x480]
call fcn.0042e991
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x470]
call fcn.0042e991
xor eax, eax
call fcn.0044739e
ret 0xc
push dword [ebp - 0x460]
lea ecx, [ebp - 0x450]
call fcn.00410d1a
push 2
pop esi
mov dword [ebp - 4], esi
cmp dword [ebp - 0x454], ebx
je 0x411665
xor eax, eax
push edi
mov word [ebp - 0x434], ax
lea eax, [ebp - 0x432]
push ebx
push eax
call fcn.00427b40
push dword [ebp - 0x454]
lea eax, [ebp - 0x434]
push 0x40e588
push 0x40e8c0
push 0xffffffffffffffff
push 0x105
push eax
call fcn.00422e28
add esp, 0x24
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x450]
call fcn.004111a3
push ebx
push ebx
push 0x402
push dword [ebp - 0x454]
call dword [0x465138]
push 0x40e8d0
lea ecx, [ebp - 0x450]
call fcn.004111a3
push 0x40e54c
lea ecx, [ebp - 0x450]
call fcn.004111a3
xor eax, eax
lea edi, [ebp - 0x490]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x40
stosd dword es:[edi], eax
lea eax, [ebp - 0x4d8]
push ebx
push eax
call fcn.00427b40
lea eax, [ebp - 0x224]
add esp, 0xc
mov dword [ebp - 0x4dc], 0x44
lea edx, [eax + 2]
mov cx, word [eax]
add eax, esi
cmp cx, bx
jne 0x4116b6
mov ecx, dword [ebp - 0x440]
sub eax, edx
sar eax, 1
lea edi, [eax + ecx + 3]
xor ecx, ecx
mov eax, edi
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00422e4e
mov esi, eax
pop ecx
cmp esi, ebx
jne 0x411703
xor esi, esi
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x450]
call fcn.0041103b
mov eax, esi
jmp 0x4115dc
cmp dword [ebp - 0x43c], 8
mov eax, dword [ebp - 0x450]
jae 0x411718
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x224]
push eax
push 0x40e8d8
push 0xffffffffffffffff
push edi
push esi
call fcn.00422e28
add esp, 0x18
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp - 0x4dc]
push eax
push dword [ebp - 0x45c]
push ebx
push ebx
push ebx
push ebx
push ebx
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push esi
mov edi, eax
call fcn.00422e5e
pop ecx
cmp edi, ebx
je 0x411789
push dword [ebp - 0x48c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
cmp dword [ebp - 0x454], ebx
jne 0x41177c
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x41179c
push dword [ebp - 0x490]
push 0x403
jmp 0x411790
push ebx
push ebx
push 0x401
push dword [ebp - 0x454]
call dword [0x465138]
mov esi, edi
jmp 0x4116ea