Function at 0x40a940
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6266b3
mov eax, dword fs:[0]
push eax
sub esp, 0x2cc
mov eax, dword [0x6aab00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x6baae0]
push 0x663ea8
push eax
call fcn.0054da9f
xor edi, edi
add esp, 8
cmp eax, edi
sete al
test al, al
jne 0x40abd7
push 0x6baadc
mov ecx, 0x6baacc
mov dword [0x6baad8], edi
mov dword [0x6baad4], edi
call fcn.004017f0
push 0x6baae0
mov ecx, 0x6baad0
call fcn.004017f0
mov ecx, dword [0x6baae0]
push 0x664938
push ecx
call fcn.0054cf8f
add esp, 8
mov esi, eax
push edi
cmp esi, edi
jne 0x40a9ec
push edi
push edi
push edi
push 0x6baacc
push 0x408ac0
call fcn.00461a85
jmp 0x40abd7
push 0x28
push esi
call fcn.0054f658
add esp, 0xc
push esi
call fcn.0054f6d4
lea edx, [eax - 0x30]
add esp, 4
cmp dl, 9
ja 0x40aa86
movsx ecx, al
mov eax, dword [0x6baae4]
xor edx, edx
mov ebx, 0xa
div ebx
sub ecx, 0x30
cmp ecx, edx
je 0x40aa33
push edi
push edi
push edi
push edi
push 0x6baacc
push 0x408ac0
call fcn.00461a85
push esi
call fcn.0054d577
mov edx, dword [0x6baae0]
add esp, 4
push 1
push edx
lea ecx, [ebp - 0x28c]
call fcn.0045043f
push edi
push 0x8c
lea ecx, [ebp - 0x28c]
mov dword [ebp - 4], edi
call fcn.0044fb8f
lea ecx, [ebp - 0x28c]
call fcn.0044fc74
lea ecx, [ebp - 0x28c]
mov dword [ebp - 4], 0xffffffff
call fcn.0044fe47
jmp 0x40abd7
push edi
push 0x28
push esi
call fcn.0054f658
mov eax, dword [0x6baae4]
xor edx, edx
mov ecx, 0xa
div ecx
add esp, 0xc
push esi
add edx, 0x30
push edx
call fcn.0054f7c8
push esi
call fcn.0054d577
mov eax, dword [0x6baae0]
add esp, 8
add eax, 0xfffffff0
mov dword [ebp - 0x264], esp
mov esi, esp
push eax
call fcn.00401780
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.00412bc0
add esp, 4
cmp eax, edi
je 0x40abd7
call fcn.00408a40
lea esi, [ebp - 0x264]
call fcn.004087a0
push 0x40
lea edx, [ebp - 0x2d4]
push edi
mov ebx, 1
push edx
mov dword [ebp - 4], ebx
call fcn.00551e50
mov esi, dword [ebp - 0x264]
mov edx, dword [0x6baae0]
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x2d8]
push ecx
push esi
push edi
push edi
push edi
push edi
push edi
push edi
push edx
mov dword [ebp - 0x274], edi
mov dword [ebp - 0x2d8], 0x44
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov eax, dword [ebp - 0x274]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
push ecx
add esi, 0xfffffff0
mov dword [ebp - 0x278], esp
mov edi, esp
push esi
call fcn.00401780
add esp, 4
lea ecx, [ebp - 0x260]
add eax, 0x10
push ecx
mov dword [edi], eax
call fcn.0040ace0
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.0045d7a1
lea edx, [ebp - 0x260]
push edx
call fcn.0040b700
lea eax, [ebp - 0x260]
push eax
mov byte [ebp - 4], bl
call fcn.0040ac00
mov dword [ebp - 4], 0xffffffff
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40abd7
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0054cec4
mov esp, ebp
pop ebp
ret