Function at 0x40bca0
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x4210
call fcn.0041f870
mov eax, dword [0x447e38]
push ebx
push ebp
mov ebp, dword [esp + 0x421c]
mov ecx, dword [eax + 0x7290]
push esi
mov ebx, dword [ebp + 4]
push edi
cmp ebx, ecx
jne 0x40be64
test eax, eax
je 0x40be4a
mov ecx, dword [eax + 0x5ebc]
test ecx, ecx
je 0x40be4a
push 0x4463c5
mov byte [0x4463c4], 0x4e
call fcn.004147d0
mov edi, 0x4463c4
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, 0x200
push str._int__pmsg__wParam
push str.Front_started
sub eax, ecx
push 0x440ae4
push eax
mov edi, 0x4463c4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4463c4
push ecx
call fcn.0041f19c
mov ecx, dword [ebp + 8]
push 0x4463c4
push ecx
mov edi, 0x4463c4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4463c4
push ecx
call fcn.00414ba0
mov eax, dword [0x447e38]
add esp, 0x20
mov cl, byte [eax + 0x5ec0]
lea edi, [eax + 0x5ec0]
test cl, cl
je 0x40be36
mov ax, word [0x440ae0]
mov edx, dword [str.hh.mm]
mov word [esp + 0x14], ax
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x10], edx
mov word [esp + 0x16], 0
lea edx, [esp + 0x20]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov dx, word [0x4463c8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x10]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
mov cx, word [0x4463c5]
push str.time
mov word [esp + 0x18], cx
lea ecx, [esp + 0x28]
push ecx
mov word [esp + 0x1f], dx
call fcn.00417780
lea edx, [esp + 0x2c]
push 0x4409c4
push edx
call fcn.0041f85a
mov esi, eax
add esp, 0x14
test esi, esi
je 0x40be4a
push esi
push 0x4463c4
call fcn.0041f6fc
mov edi, 0x4463c4
or ecx, 0xffffffff
xor eax, eax
add esp, 8
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp byte [ecx + 0x4463c3], 0xa
je 0x40be2b
push esi
push 0x440ad0
call fcn.0041f6fc
add esp, 8
push esi
call fcn.0041f74a
add esp, 4
jmp 0x40be4a
mov eax, dword [eax + 0x72b4]
push 0x4463c4
push eax
call fcn.00408560
add esp, 8
mov edx, dword [0x447860]
mov ecx, dword [ebp + 8]
mov dword [edx], ecx
mov ecx, 0x4479d0
call fcn.00416390
mov eax, dword [0x447e38]
cmp ebx, dword [eax + 0x728c]
jne 0x40c03a
test eax, eax
je 0x40bfef
mov ecx, dword [eax + 0x5ebc]
test ecx, ecx
je 0x40bfef
push 0x4463c5
mov byte [0x4463c4], 0x4e
call fcn.004147d0
mov edi, 0x4463c4
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, 0x200
push str._int__pmsg__wParam
push str.Front_stopped
sub eax, ecx
push 0x440ae4
push eax
mov edi, 0x4463c4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4463c4
push ecx
call fcn.0041f19c
mov ecx, dword [ebp + 8]
push 0x4463c4
push ecx
mov edi, 0x4463c4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4463c4
push ecx
call fcn.00414ba0
mov eax, dword [0x447e38]
add esp, 0x20
mov cl, byte [eax + 0x5ec0]
lea edi, [eax + 0x5ec0]
test cl, cl
je 0x40bfdb
mov ax, word [0x440ae0]
mov edx, dword [str.hh.mm]
mov word [esp + 0x14], ax
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x10], edx
mov word [esp + 0x16], 0
lea edx, [esp + 0x20]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov dx, word [0x4463c8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x10]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
mov cx, word [0x4463c5]
push str.time
mov word [esp + 0x18], cx
lea ecx, [esp + 0x28]
push ecx
mov word [esp + 0x1f], dx
call fcn.00417780
lea edx, [esp + 0x2c]
push 0x4409c4
push edx
call fcn.0041f85a
mov esi, eax
add esp, 0x14
test esi, esi
je 0x40bfef
push esi
push 0x4463c4
call fcn.0041f6fc
mov edi, 0x4463c4
or ecx, 0xffffffff
xor eax, eax
add esp, 8
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp byte [ecx + 0x4463c3], 0xa
je 0x40bfd0
push esi
push 0x440ad0
call fcn.0041f6fc
add esp, 8
push esi
call fcn.0041f74a
add esp, 4
jmp 0x40bfef
mov eax, dword [eax + 0x72b4]
push 0x4463c4
push eax
call fcn.00408560
add esp, 8
mov ebp, dword [ebp + 8]
test ebp, ebp
je 0x40c46d
mov ecx, dword [0x447860]
mov dword [ecx], ebp
mov ecx, 0x4479d0
call fcn.004161d0
mov al, byte [0x4479ec]
test al, al
je 0x40c472
mov edx, dword [0x4479f0]
mov ecx, 0x4479d0
push edx
call fcn.00415d20
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7260]
jne 0x40c057
call fcn.0041abd0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x723c]
jne 0x40c092
mov eax, dword [ebp + 8]
mov ecx, dword [0x447dcc]
cmp eax, ecx
je 0x40c075
mov eax, dword [0x447e68]
test eax, eax
je 0x40c082
mov ecx, dword [0x447dd0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7238]
jne 0x40c0f0
mov dx, word [ebp + 0xc]
mov eax, dword [ebp + 8]
push edx
push eax
call fcn.00413160
mov ecx, dword [0x447e38]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
add esp, 8
mov edx, dword [ecx + 0x72c0]
push 0
push 0
push 0x184
push edx
call esi
mov eax, dword [0x447e38]
push 0
push 0
push 0x184
mov ecx, dword [eax + 0x72c4]
push ecx
call esi
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7240]
jne 0x40c121
xor edx, edx
push 0x200
mov dx, word [ebp + 0xc]
push 0x44662c
push edx
call fcn.00408690
add esp, 0xc
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7268]
jne 0x40c146
mov ax, word [ebp + 0xc]
push eax
call fcn.004189d0
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7294]
jne 0x40c16b
mov cx, word [ebp + 0xc]
push ecx
call fcn.00418a70
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x722c]
jne 0x40c188
call fcn.00414310
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7298]
jne 0x40c24d
mov ecx, dword [ebp + 8]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov edi, dword [sym.imp.USER32.dll_LoadIconA]
cmp ecx, 1
jne 0x40c1f3
mov ecx, dword [eax + 0x5bb4]
test ecx, ecx
je 0x40c1c6
mov edx, dword [0x447c3c]
push 0x89
push edx
call edi
test eax, eax
je 0x40c1ee
jmp 0x40c1d8
mov edx, dword [0x447c3c]
push 0x87
push edx
call edi
test eax, eax
je 0x40c1ee
push eax
mov eax, dword [0x447e38]
push 0
push 0x80
mov ecx, dword [eax + 0x72a8]
push ecx
call esi
mov eax, dword [0x447e38]
mov ecx, dword [ebp + 8]
test ecx, ecx
jne 0x40c23d
mov ecx, dword [eax + 0x5bb4]
test ecx, ecx
je 0x40c218
mov edx, dword [0x447c3c]
push 0x88
push edx
call edi
test eax, eax
je 0x40c23d
jmp 0x40c227
mov edx, dword [0x447c3c]
push 0x65
push edx
call edi
test eax, eax
je 0x40c23d
push eax
mov eax, dword [0x447e38]
push 0
push 0x80
mov ecx, dword [eax + 0x72a8]
push ecx
call esi
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7250]
jne 0x40c271
mov edx, dword [ebp + 8]
push edx
call fcn.00419600
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x725c]
jne 0x40c29a
mov ax, word [ebp + 0xc]
mov ecx, dword [ebp + 8]
push eax
push ecx
call fcn.00412f60
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7254]
jne 0x40c2c2
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push edx
push eax
call fcn.0041a710
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7258]
jne 0x40c2e6
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041b120
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x724c]
jne 0x40c465
mov al, byte [0x4415ac]
mov edx, dword [str.open]
mov byte [esp + 0x224], al
mov ecx, 0x3fe
xor eax, eax
lea edi, [esp + 0x225]
mov dword [esp + 0x220], edx
mov dl, byte [0x4488a8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x3ff
xor eax, eax
lea edi, [esp + 0x1221]
mov byte [esp + 0x1220], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x3ff
xor eax, eax
lea edi, [esp + 0x2221]
mov byte [esp + 0x2220], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x3ff
xor eax, eax
lea edi, [esp + 0x3221]
mov byte [esp + 0x3220], dl
rep stosd dword es:[edi], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ax, word [ebp + 8]
mov di, word [ebp + 0xc]
mov ebp, dword [ebp + 0xc]
mov dword [esp + 0x18], ebx
shr esi, 0x10
shr ebp, 0x10
test ax, ax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x10], ebx
je 0x40c3bf
lea ecx, [esp + 0x220]
push 0x1000
and eax, 0xffff
push ecx
push eax
call fcn.00408690
lea edx, [esp + 0x22c]
add esp, 0xc
mov dword [esp + 0x18], edx
test si, si
je 0x40c3e9
lea eax, [esp + 0x1220]
push 0x1000
and esi, 0xffff
push eax
push esi
call fcn.00408690
add esp, 0xc
lea esi, [esp + 0x1220]
jmp 0x40c3ed
mov esi, dword [esp + 0x1c]
test di, di
je 0x40c417
lea ecx, [esp + 0x2220]
push 0x1000
and edi, 0xffff
push ecx
push edi
call fcn.00408690
add esp, 0xc
lea edi, [esp + 0x2220]
jmp 0x40c41b
mov edi, dword [esp + 0x10]
test bp, bp
je 0x40c443
lea edx, [esp + 0x3220]
push 0x1000
and ebp, 0xffff
push edx
push ebp
call fcn.00408690
add esp, 0xc
lea ebx, [esp + 0x3220]
mov eax, dword [esp + 0x18]
push 1
push ebx
push edi
push esi
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4210
ret
cmp ebx, dword [eax + 0x7264]
jne 0x40c482
call fcn.0040b820
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4210
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x4210
ret