Function at 0x4193a7
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov eax, 0x41e76c
call fcn.0041baa0
sub esp, 0x16c
push ebx
push esi
lea eax, [ebp - 0x178]
push edi
xor ebx, ebx
push eax
mov dword [ebp - 0x14], ebx
call fcn.0041a020
cmp byte [ebp - 0x178], bl
pop ecx
je 0x4195d5
push 0x10
lea eax, [ebp - 0x24]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
call fcn.0041849a
cmp al, bl
mov byte [ebp - 0xd], al
je 0x41946c
cmp byte [ebp + 0xc], bl
jne 0x41946c
push 8
lea eax, [ebp - 0x2c]
pop esi
push esi
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x2c], esi
push dword [ebp + 8]
call fcn.0040afbc
mov eax, dword [ebp + 0xc]
mov dword [ebp - 4], ebx
cmp eax, ebx
je 0x419425
mov eax, dword [eax]
jmp 0x419427
xor eax, eax
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x24]
push ecx
push eax
call fcn.0041a1de
add esp, 0xc
test eax, eax
jl 0x419457
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x1c]
cmp ecx, ebx
mov dword [ebp - 0x14], eax
je 0x419549
call fcn.0040b0bb
jmp 0x419549
mov ecx, dword [ebp + 0xc]
cmp ecx, ebx
je 0x41953c
call fcn.0040b0bb
jmp 0x41953c
lea eax, [ebp - 0x178]
push str.internet_exploreriexplore.exe
push eax
call sub.MSVCRT.dll_strcat
push dword [ebp + 8]
call sub.MSVCRT.dll_strlen
mov esi, eax
add esi, 0x105
push esi
call sub.MFC42.DLL_operatornew
mov edi, eax
push esi
push ebx
push edi
call sub.MSVCRT.dll_memset
mov esi, 0x428308
push esi
push edi
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x178]
push eax
push edi
call sub.MSVCRT.dll_strcat
push esi
push edi
call sub.MSVCRT.dll_strcat
mov eax, dword [ebp + 8]
add esp, 0x34
cmp eax, ebx
je 0x4194e9
cmp byte [eax], bl
je 0x4194e9
push 0x429b60
push edi
call sub.MSVCRT.dll_strcat
push dword [ebp + 8]
push edi
call sub.MSVCRT.dll_strcat
push esi
push edi
call sub.MSVCRT.dll_strcat
add esp, 0x18
push 0x44
lea eax, [ebp - 0x70]
pop esi
push esi
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp byte [ebp + 0xc], bl
mov dword [ebp - 0x70], esi
je 0x41950a
or dword [ebp - 0x44], 1
mov word [ebp - 0x40], bx
lea eax, [ebp - 0x24]
cmp byte [ebp - 0xd], bl
push eax
lea eax, [ebp - 0x70]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
push ebx
je 0x419529
call fcn.004192d2
add esp, 0x28
jmp 0x41952f
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push edi
mov esi, eax
call sub.MFC42.DLL_operatordelete
cmp esi, ebx
pop ecx
jne 0x419543
xor eax, eax
jmp 0x4195d8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
cmp dword [ebp + 0x14], ebx
je 0x4195a3
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
xor edi, edi
cmp dword [ebp + 0x14], ebx
mov dword [ebp + 0xc], ebx
jle 0x41957c
cmp edi, ebx
jne 0x41957c
push 0x64
call esi
push dword [ebp - 0x1c]
call fcn.004192af
inc dword [ebp + 0xc]
mov edi, eax
mov eax, dword [ebp + 0xc]
pop ecx
cmp eax, dword [ebp + 0x14]
jl 0x41955e
push 0x1f4
call esi
cmp edi, ebx
je 0x4195a3
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push ebx
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push edi
call esi
push 3
push ebx
push ebx
push ebx
push ebx
push 0xfffffffffffffffe
push edi
call esi
cmp dword [ebp + 0x10], ebx
je 0x4195c5
push dword [ebp + 0x10]
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x4195c5
push ebx
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x24]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x20]
call esi
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret