Function at 0x40e3b0
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x46f384
mov eax, dword fs:[0]
push eax
sub esp, 0x264
mov eax, dword [0x49fba8]
xor eax, esp
mov dword [esp + 0x260], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x49fba8]
xor eax, esp
push eax
lea eax, [esp + 0x278]
mov dword fs:[0], eax
mov eax, dword [esp + 0x28c]
xor ebx, ebx
cmp eax, ebx
jne 0x40e3fd
mov eax, 0x47bd74
push eax
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
lea ecx, [esp + 0x18]
mov dword [esp + 0x280], ebx
call dword [sym.imp.MFC80U.DLL_Ordinal_293]
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_293]
push ebx
push 0x22
lea ecx, [esp + 0x24]
mov byte [esp + 0x288], 2
call dword [sym.imp.MFC80U.DLL_Ordinal_2260]
push ebx
push 0x20
lea ecx, [esp + 0x24]
mov edi, eax
call dword [sym.imp.MFC80U.DLL_Ordinal_2260]
mov esi, eax
cmp esi, ebx
jle 0x40e53a
cmp edi, ebx
jl 0x40e4cb
cmp edi, esi
jge 0x40e4cb
lea ebp, [edi + 1]
push ebp
push 0x22
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_2260]
mov esi, eax
cmp esi, ebx
jl 0x40e558
sub eax, edi
sub eax, 1
push eax
push ebp
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x28]
call dword [sym.imp.MFC80U.DLL_Ordinal_4101]
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 3
call dword [sym.imp.MFC80U.DLL_Ordinal_774]
lea ecx, [esp + 0x14]
mov byte [esp + 0x280], 2
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
add esi, 1
push esi
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_4100]
mov byte [esp + 0x280], 4
jmp 0x40e51b
push esi
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_3990]
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 5
call dword [sym.imp.MFC80U.DLL_Ordinal_774]
lea ecx, [esp + 0x14]
mov byte [esp + 0x280], 2
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
add esi, 1
push esi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_4100]
mov byte [esp + 0x280], 6
push eax
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_774]
lea ecx, [esp + 0x14]
mov byte [esp + 0x280], 2
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
jmp 0x40e558
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_774]
push 0x47bd74
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_776]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_6167]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_6173]
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_6167]
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_6173]
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x40e711
push 0x208
lea ecx, [esp + 0x6e]
push ebx
push ecx
mov word [esp + 0x74], bx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea edx, [esp + 0x6c]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
push 0x5c
lea ecx, [esp + 0x18]
mov byte [esp + 0x284], 7
call dword [sym.imp.MFC80U.DLL_Ordinal_5524]
cmp eax, ebx
jle 0x40e6ff
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_3990]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x284], 8
call dword [sym.imp.MFC80U.DLL_Ordinal_774]
lea ecx, [esp + 0x24]
mov byte [esp + 0x280], 7
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
push 0x47ce8c
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x30]
push eax
call fcn.00401870
lea ecx, [esp + 0x24]
push ecx
push eax
lea edx, [esp + 0x38]
push edx
mov byte [esp + 0x298], 9
call fcn.0040d2d0
add esp, 0x18
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x284], 0xa
call dword [sym.imp.MFC80U.DLL_Ordinal_774]
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x28]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
push 0x38
lea eax, [esp + 0x34]
push ebx
push eax
call sub.MSVCR80.dll_memset
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x48], ecx
add esp, 0xc
lea ecx, [esp + 0x2c]
push ecx
mov dword [esp + 0x30], 0x3c
mov dword [esp + 0x34], 0x40
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 5
mov dword [esp + 0x50], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
neg esi
sbb esi, esi
and esi, dword [esp + 0x64]
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
mov eax, esi
jmp 0x40e74c
lea ecx, [esp + 0x14]
mov byte [esp + 0x280], 2
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
push 0x2ac
push str..NBKeyScan.cpp
push str.Unable_to_get_the_module_name___
call fcn.0040c7f0
mov ecx, eax
call fcn.0040e240
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
xor eax, eax
mov ecx, dword [esp + 0x278]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x260]
xor ecx, esp
call fcn.0046cc14
add esp, 0x270
ret 8