Function at 0x40a01e
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x430365
call fcn.0042f6e0
sub esp, 0x64
movsx eax, word [0x43bbde]
push ebx
push esi
push edi
push eax
push dword [0x43bbfc]
call fcn.004117aa
mov dword [0x43bc04], eax
xor ebx, ebx
xor edi, edi
xor eax, eax
cmp byte [0x43bbce], bl
push 0x44
pop esi
setne al
mov word [0x43bbe0], ax
push esi
lea eax, [ebp - 0x70]
push ebx
push eax
call sub.MSVCRT.dll_memset
push 0xd90bffff
push dword [0x43bc08]
call fcn.004118a0
add byte [0x43bbce], al
mov al, byte [0x43bbf0]
add al, byte [0x43bbc9]
dec word [0x43bbe4]
push 0x10
push ebx
add byte [0x43bbce], al
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x70], esi
call sub.MSVCRT.dll_memset
movsx eax, word [0x43bbe4]
movsx ecx, word [0x43bbe0]
imul eax, ecx
push 0x7befffff
mov dword [0x43bbec], eax
push dword [0x43bbf0]
call fcn.004117aa
add word [0x43bbe2], ax
add esp, 0x30
cmp dword [0x43bbfc], ebx
je 0x40a0ec
cmp word [0x43bbda], bx
je 0x40a0ec
push 1
pop eax
jmp 0x40a0ee
xor eax, eax
mov esi, dword [ebp + 8]
add dword [0x43bc00], eax
push ebx
lea ecx, [ebp - 0x1c]
mov al, byte [esi]
mov byte [ebp - 0x1c], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
lea ecx, [ebp - 0x1c]
push dword [eax]
push ebx
push esi
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
push 0x8537ffff
mov dword [ebp - 4], ebx
push dword [0x43bbec]
call fcn.004116ab
add byte [0x43bbc9], al
mov eax, dword [ebp - 0x18]
sub dword [0x43bc00], 0x28100001
pop ecx
cmp eax, ebx
pop ecx
jne 0x40a149
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x70]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x40a21a
movsx eax, word [0x43bbde]
push 0x55d3ffff
push eax
call fcn.004117aa
add dword [0x43bbfc], eax
push 0xee13ffff
movsx eax, byte [0x43bbcc]
push eax
call fcn.00411856
add byte [0x43bbc8], al
push 1
inc word [0x43bbe0]
pop edi
push 0xd237ffff
push dword [0x43bbf4]
call fcn.004116ab
add esp, 0x18
mov dword [0x43bc0c], eax
push dword [ebp - 0x2c]
push 0x37
call fcn.00415e0d
pop ecx
call eax
movsx eax, byte [0x43bbd0]
push eax
movsx eax, word [0x43bbd8]
push eax
call fcn.004116ab
add word [0x43bbe0], ax
push 0x5187ffff
movsx eax, byte [0x43bbcc]
push eax
call fcn.00411762
add esp, 0x10
mov word [0x43bbda], ax
push dword [ebp - 0x28]
push 0x37
call fcn.00415e0d
pop ecx
call eax
mov eax, dword [0x43bc0c]
imul eax, eax, 0xa82dffff
mov dword [0x43bc00], eax
movsx eax, word [0x43bbd6]
push eax
movsx eax, byte [0x43bbce]
push eax
call fcn.004118e8
or dword [ebp - 4], 0xffffffff
mov dword [0x43bbec], eax
pop ecx
or al, 0xff
sub al, byte [0x43bbde]
pop ecx
push 1
lea ecx, [ebp - 0x1c]
mov byte [0x43bbc9], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret