Function at 0x4018c9
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x4304ff
call fcn.0041aad0
sub esp, 0x850
push esi
mov esi, ecx
push edi
cmp byte [esi + 0x84], 0
je 0x401998
lea eax, [esi + 0x64]
push ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040c092
pop ecx
pop ecx
mov eax, dword [eax + 4]
and dword [ebp - 4], 0
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
test eax, eax
mov ebx, ecx
je 0x40190f
mov ebx, eax
mov eax, dword [esi + 0x78]
mov edi, ecx
test eax, eax
je 0x40191a
mov edi, eax
mov esi, dword [esi + 0x8c]
test esi, esi
jne 0x401926
mov esi, ecx
push dword [0x447268]
lea eax, [ebp - 0x3c]
push dword [0x4471fc]
push eax
call fcn.0040cbf4
push eax
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 4], 1
call fcn.0040c092
mov eax, dword [eax + 4]
add esp, 0x14
test eax, eax
jne 0x401958
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
push ebx
push edi
push esi
push eax
lea eax, [ebp - 0x85c]
push eax
call dword [sym.imp.MSVCRT.dll_swprintf]
add esp, 0x14
lea ecx, [ebp - 0x5c]
push 1
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
and byte [ebp - 4], 0
push 1
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x1c]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
pop ebx
jmp 0x401a17
mov eax, dword [esi + 0x78]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
test eax, eax
mov edi, ecx
je 0x4019a9
mov edi, eax
mov esi, dword [esi + 0x8c]
test esi, esi
jne 0x4019b5
mov esi, ecx
push dword [0x44726c]
lea eax, [ebp - 0x4c]
push dword [0x4471fc]
push eax
call fcn.0040cbf4
push eax
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 4], 2
call fcn.0040c092
mov eax, dword [eax + 4]
add esp, 0x14
test eax, eax
jne 0x4019ea
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
push edi
push esi
push eax
lea eax, [ebp - 0x85c]
push eax
call dword [sym.imp.MSVCRT.dll_swprintf]
add esp, 0x10
lea ecx, [ebp - 0x2c]
push 1
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, 0x449d54
push 5
push eax
push eax
lea eax, [ebp - 0x85c]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [ebp - 0xc]
push 1
pop eax
pop edi
pop esi
mov dword fs:[0], ecx
leave
ret 0xc