Function at 0x405f2a
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x470
and dword [ebp - 0x468], 0
and dword [ebp - 0x34c], 0
and dword [ebp - 0x350], 0
and dword [ebp - 0x244], 0
and dword [ebp - 0x240], 0
and dword [ebp - 0x470], 0
and dword [ebp - 0x134], 0
and dword [ebp - 0x130], 0
and dword [ebp - 0x46c], 0
and dword [ebp - 0x354], 0
and dword [ebp - 0x23c], 0
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x358], 1
and dword [ebp - 0x460], 0
cmp dword [0x42753c], 0
je 0x405fac
push 1
pop eax
jmp 0x4063d4
push 0x423434
push dword [ebp + 0xc]
call fcn.0041003e
push 0
push 2
push dword [ebp + 8]
call fcn.004030f1
mov dword [ebp - 0x468], eax
push 0
call fcn.004193a0
mov dword [ebp - 0x34c], eax
push 0
call fcn.004193a0
mov dword [ebp - 0x350], eax
push 1
pop eax
test eax, eax
je 0x406301
push dword [ebp - 0x34c]
call fcn.00419460
and dword [ebp - 0x34c], 0
push 0
call fcn.004193a0
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x464], 0
je 0x406062
and dword [ebp - 0x464], 0
push 1
push dword [ebp - 0x34c]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x354]
push eax
push 0x423438
push dword [ebp + 0xc]
call fcn.0041008f
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 1
jne 0x406060
push 1
pop eax
jmp 0x4063d4
jmp 0x406092
push 2
push dword [ebp - 0x34c]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x354]
push eax
push 0x42343c
push dword [ebp + 0xc]
call fcn.0041008f
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0
jge 0x4060a3
push 0xffffffffffffffe6
pop eax
jmp 0x4063d4
push dword [ebp - 0x34c]
call fcn.00419040
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0
jne 0x4060d0
cmp dword [ebp - 0x46c], 1
jne 0x4060cb
jmp 0x406301
jmp 0x405fe5
push dword [ebp - 0x34c]
call fcn.004190a0
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jne 0x4060fd
cmp dword [ebp - 0x46c], 1
jne 0x4060f8
jmp 0x406301
jmp 0x405fe5
mov eax, dword [ebp - 0x240]
and eax, 0x20
test eax, eax
jne 0x40610f
jmp 0x405fe5
push dword [ebp - 0x134]
push dword [ebp - 0x470]
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x406139
push dword [ebp - 0x470]
call fcn.0040bf25
test eax, eax
je 0x406139
jmp 0x405fe5
push dword [ebp - 0x134]
call fcn.0040bf25
test eax, eax
jne 0x40614d
jmp 0x405fe5
push 1
pop eax
test eax, eax
je 0x4062f1
mov eax, dword [ebp - 0x240]
and eax, 2
test eax, eax
je 0x406185
push 0
push 1
push 1
push 0xffffffffffffffff
push dword [ebp - 0x134]
call fcn.00416659
mov dword [ebp - 0x244], eax
xor eax, eax
jmp 0x4063d4
push 0
push 0
push 1
push 0xffffffffffffffff
push dword [ebp - 0x134]
call fcn.00416659
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jle 0x4061ac
jmp 0x405fe5
cmp dword [ebp - 0x244], 0
jge 0x4061c7
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
jmp 0x405fe5
push dword [ebp - 0x134]
call fcn.004080be
pop ecx
test eax, eax
je 0x4062de
push dword [ebp - 0x134]
call fcn.004074fc
pop ecx
test eax, eax
je 0x4062de
lea eax, [ebp - 0x348]
push eax
push dword [ebp - 0x134]
call fcn.004142d0
push 0x423440
lea eax, [ebp - 0x348]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x406287
push 0
lea eax, [ebp - 0x45c]
push eax
call fcn.004136b0
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x134]
call fcn.004130de
lea eax, [ebp - 0x238]
push eax
call fcn.0041367a
push dword [ebp - 0x134]
push 0x423444
lea eax, [ebp - 0x348]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 1
lea eax, [ebp - 0x348]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp eax, 0x20
jae 0x406279
and dword [ebp - 0x358], 0
lea eax, [ebp - 0x45c]
push eax
call fcn.0041367a
jmp 0x406298
push dword [ebp - 0x134]
call fcn.004076aa
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
jne 0x4062c0
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
push 0
push dword [ebp - 0x134]
push 0x3f8
call fcn.00403da4
push dword [ebp - 0x134]
push dword [ebp - 0x350]
call fcn.00419100
test eax, eax
jne 0x4062dc
xor eax, eax
jmp 0x4063d4
jmp 0x4062f1
push 0
push 1
push 1
push 0
push dword [ebp - 0x134]
call fcn.00416659
cmp dword [ebp - 0x46c], 1
jne 0x4062fc
jmp 0x406301
jmp 0x405fe5
push 1
pop eax
test eax, eax
je 0x4063c4
push dword [ebp - 0x350]
call fcn.00419040
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x4063c4
push dword [ebp - 0x130]
call fcn.0040bb1b
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
and eax, 1
test eax, eax
je 0x406368
mov eax, dword [ebp - 0x460]
xor eax, 1
mov dword [ebp - 0x460], eax
push dword [ebp - 0x460]
push dword [ebp - 0x130]
call fcn.0040a3d7
push dword [ebp - 0x130]
call fcn.0040ac18
cmp eax, 0xffffffff
jne 0x4063ae
push 1
push dword [ebp - 0x130]
push dword [ebp + 8]
call fcn.004078a0
add esp, 0xc
test eax, eax
jne 0x4063ae
push 0
push dword [ebp - 0x130]
push 0x3f2
call fcn.00403da4
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
push dword [ebp - 0x350]
call fcn.004190a0
mov dword [ebp - 0x130], eax
jmp 0x40631d
cmp dword [ebp - 0x23c], 0
jle 0x4063d1
xor eax, eax
jmp 0x4063d4
push 1
pop eax
leave
ret 8