Function at 0x405f8f
Capabilities:
Create process on windows

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4089af
push eax
mov eax, 0x1400
mov dword fs:[0], esp
call fcn.004079d0
push esi
mov esi, ecx
push edi
lea ecx, [esi + 0x58]
call fcn.00402c00
test eax, eax
jl 0x406222
mov ecx, dword [esi + 0x48]
mov eax, dword [ecx + eax*4]
test eax, eax
je 0x406222
push eax
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x30]
mov dword [esp + 0x1410], 0
call dword [sym.imp.RealDB.dll_public:_void___thiscall_CMultiDataBase::constructor_void_]
lea ecx, [esp + 0x30]
mov byte [esp + 0x1410], 1
call dword [sym.imp.RealDB.dll_public:_int___thiscall_CMultiDataBase::AttachShareMemory_void_]
test eax, eax
je 0x40600b
mov edx, dword [esi + 0x20]
push 0
push 0x40c130
push str.CyberDB
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x30]
call dword [sym.imp.RealDB.dll_public:_void___thiscall_CMultiDataBase::DetachShareMemory_void_]
jmp 0x4061fc
push ecx
lea eax, [esp + 0xc]
mov ecx, esp
mov dword [esp + 0x10], esp
push eax
call sub.MFC42.DLL_CString::CString_1
mov ecx, esi
call fcn.004073c0
push ecx
lea edx, [esp + 0xc]
mov ecx, esp
mov dword [esp + 0x10], esp
push edx
call sub.MFC42.DLL_CString::CString_1
mov ecx, esi
call fcn.00406580
push ecx
lea eax, [esp + 0xc]
mov ecx, esp
mov dword [esp + 0x10], esp
push eax
call sub.MFC42.DLL_CString::CString_1
mov ecx, esi
call fcn.00407540
push 0x40c314
lea ecx, [esp + 0x10]
push 0x40c690
push ecx
call sub.MFC42.DLL_operator
mov esi, dword [eax]
push 0x40c690
lea edx, [esp + 0x24]
push 0x40c310
push edx
mov byte [esp + 0x141c], 2
call sub.MFC42.DLL_operator_1
push 0x40c284
push eax
lea eax, [esp + 0x20]
mov byte [esp + 0x1418], 3
push eax
call sub.MFC42.DLL_operator
lea ecx, [esp + 8]
lea edx, [esp + 0x14]
push ecx
push eax
push edx
mov byte [esp + 0x141c], 4
call sub.MFC42.DLL_operator_2
push str.logic_
push eax
lea eax, [esp + 0x18]
mov byte [esp + 0x1418], 5
push eax
call sub.MFC42.DLL_operator
lea ecx, [esp + 8]
lea edx, [esp + 0x1c]
push ecx
push eax
push edx
mov byte [esp + 0x141c], 6
call sub.MFC42.DLL_operator_2
push str..mwt
push eax
lea eax, [esp + 0x2c]
mov byte [esp + 0x1418], 7
push eax
call sub.MFC42.DLL_operator
push 0x40c310
lea ecx, [esp + 0x2c]
push eax
push ecx
mov byte [esp + 0x141c], 8
call sub.MFC42.DLL_operator
mov edi, dword [eax]
push str._binmwt.exe
lea edx, [esp + 0x30]
push 0x40c690
push edx
mov byte [esp + 0x141c], 9
call sub.MFC42.DLL_operator
mov eax, dword [eax]
push 1
push esi
push edi
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [esp + 0x2c]
call fcn.00407cca
lea ecx, [esp + 0x28]
mov byte [esp + 0x1410], 8
call fcn.00407cca
lea ecx, [esp + 0x24]
mov byte [esp + 0x1410], 7
call fcn.00407cca
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1410], 6
call fcn.00407cca
lea ecx, [esp + 0x10]
mov byte [esp + 0x1410], 5
call fcn.00407cca
lea ecx, [esp + 0x14]
mov byte [esp + 0x1410], 4
call fcn.00407cca
lea ecx, [esp + 0x18]
mov byte [esp + 0x1410], 3
call fcn.00407cca
lea ecx, [esp + 0x20]
mov byte [esp + 0x1410], 2
call fcn.00407cca
lea ecx, [esp + 0xc]
mov byte [esp + 0x1410], 1
call fcn.00407cca
call sub.MFC42.DLL_AfxGetThread
test eax, eax
je 0x4061ea
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
jmp 0x4061ec
xor eax, eax
mov eax, dword [eax + 0x20]
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x30]
mov byte [esp + 0x1410], 0
call dword [sym.imp.RealDB.dll_public:_void___thiscall_CMultiDataBase::destructor_void_]
lea ecx, [esp + 8]
mov dword [esp + 0x1410], 0xffffffff
call fcn.00407cca
mov ecx, dword [esp + 0x1408]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x140c
ret