Function at 0x408b80
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push 0xffffffffffffffff
push 0x42c39c
mov eax, dword fs:[0]
push eax
mov eax, 0x31b4
call fcn.0042ac10
mov eax, dword [0x43c01c]
xor eax, esp
mov dword [esp + 0x31b0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x43c01c]
xor eax, esp
push eax
lea eax, [esp + 0x31c8]
mov dword fs:[0], eax
xor ebp, ebp
push 0xc6
lea eax, [esp + 0x102]
push ebp
push eax
mov word [esp + 0x108], bp
call sub.MSVCR80.dll_memset
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x430118
push 0xffffffffffffffff
lea ecx, [esp + 0x108]
push 0x64
push ecx
call dword [sym.imp.MSVCR80.dll__snwprintf_s]
add esp, 0x14
lea esi, [esp + 0x60]
call fcn.0040a650
lea edx, [esp + 0xfc]
push edx
push eax
lea eax, [esp + 0xcc]
push eax
mov dword [esp + 0x31dc], ebp
call dword [sym.imp.MSVCP80.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov ecx, esi
mov byte [esp + 0x31d0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push 0x7fe
lea ecx, [esp + 0x1ca]
push ebp
push ecx
mov word [esp + 0x1d0], bp
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x400
lea edx, [esp + 0x1c8]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov ebx, dword [esp + 0xc8]
mov esi, 8
cmp dword [esp + 0xdc], esi
jae 0x408c88
lea ebx, [esp + 0xc8]
lea ecx, [esp + 0x1c4]
call fcn.00409cb0
test eax, eax
je 0x408e29
lea eax, [esp + 0x1c4]
push eax
lea ecx, [esp + 0xe4]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
push 0x430128
lea ecx, [esp + 0x48]
mov byte [esp + 0x31d4], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
push 0x430130
lea ecx, [esp + 0x2c]
mov byte [esp + 0x31d4], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
lea ecx, [esp + 0x44]
push ecx
lea edi, [esp + 0x2c]
lea ebx, [esp + 0xe4]
mov byte [esp + 0x31d4], 5
call fcn.00409800
add esp, 4
mov ecx, edi
mov byte [esp + 0x31d0], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x44]
mov byte [esp + 0x31d0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push 0x44
lea edx, [esp + 0x80]
push ebp
push edx
call sub.MSVCR80.dll_memset
xor eax, eax
add esp, 0xc
push 0x27fe
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x9ca]
push ebp
push eax
mov dword [esp + 0x88], 0x44
mov word [esp + 0x9d0], bp
call sub.MSVCR80.dll_memset
mov edi, dword [0x43d554]
add esp, 0xc
cmp dword [0x43d568], esi
jae 0x408d82
mov edi, 0x43d554
cmp dword [esp + 0xdc], esi
mov esi, dword [esp + 0xc8]
jae 0x408d99
lea esi, [esp + 0xc8]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push edi
push esi
push 0x430134
push 0xffffffffffffffff
lea ecx, [esp + 0x9d8]
push 0x13ff
push ecx
call dword [sym.imp.MSVCR80.dll__snwprintf_s]
add esp, 0x1c
lea edx, [esp + 0x9c4]
push edx
push str.UpdateOnline_szCmdLine_s
push 0xd1
push str..Starter.cpp
call fcn.0041cc90
add esp, 0x10
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x80]
push ecx
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
lea edx, [esp + 0x9e4]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov eax, dword [esp + 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [esp + 0x1c]
push ecx
call esi
lea ecx, [esp + 0xe0]
mov byte [esp + 0x31d0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xc4]
mov dword [esp + 0x31d0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov ecx, dword [esp + 0x31c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x31b0]
xor ecx, esp
call fcn.00422218
add esp, 0x31c0
ret