Function at 0x4028b0
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x406770
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x198
mov eax, dword [0x1174004]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
push 0x105
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
call fcn.00403b10
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
push eax
call fcn.0040558a
push ecx
push eax
lea ecx, [ebp - 0x34]
mov esi, edx
call fcn.00403b10
cmp esi, 0xffffffff
jne 0x402955
mov esi, 0x14
mov dword [ebp - 0x18], 0x1174018
jmp 0x40295c
mov dword [ebp - 0x18], 0x1174020
mov dword [ebp - 0x1c], esi
test esi, esi
jne 0x402f3a
lea ecx, [ebp - 0x190]
call fcn.004026b0
push eax
lea ecx, [ebp - 0x34]
call fcn.004044b0
mov edx, dword [ebp - 0x17c]
cmp edx, 0x10
jb 0x4029b7
mov ecx, dword [ebp - 0x190]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4029ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4029ad
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004057b8
add esp, 8
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
push eax
call fcn.0040533c
test edx, edx
jne 0x402f46
lea ecx, [ebp - 0x1a8]
call fcn.004026b0
mov ecx, eax
mov edi, dword [ecx + 0x14]
mov eax, edi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 4
jb 0x402a0a
lea eax, [edx + 4]
mov esi, ecx
mov dword [ecx + 0x10], eax
cmp edi, 0x10
jb 0x4029fb
mov esi, dword [ecx]
mov eax, dword [0x407430]
mov dword [esi + edx], eax
mov byte [esi + edx + 4], 0
jmp 0x402a27
push 4
push 0x407430
mov byte [ebp - 0x154], 0
push dword [ebp - 0x154]
push 4
call fcn.00404df0
mov ecx, eax
movups xmm0, xmmword [ecx]
lea eax, [ebp - 0x190]
push eax
movups xmmword [ebp - 0x190], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x180], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea ecx, [ebp - 0x34]
call fcn.004044b0
mov edx, dword [ebp - 0x17c]
cmp edx, 0x10
jb 0x402a94
mov ecx, dword [ebp - 0x190]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402a8a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402adb
push edx
push ecx
call fcn.004057b8
add esp, 8
mov edx, dword [ebp - 0x194]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0xf
mov byte [ebp - 0x190], 0
cmp edx, 0x10
jb 0x402aeb
mov ecx, dword [ebp - 0x1a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402ae1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402ae1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004057b8
add esp, 8
push 0xc0
lea eax, [ebp - 0x140]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x140]
cmovae eax, dword [ebp - 0x34]
push eax
call fcn.00404f60
mov eax, dword [ebp - 0x140]
push 0x6b5416
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_fstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_fstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x140]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x78]
mov dword [ebp + ecx - 0x144], eax
call fcn.004057c6
add esp, 4
mov esi, eax
push 0x6b5416
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx*2 + 0x4074e0]
sub al, 0xe
mov byte [ecx + esi], al
inc ecx
cmp ecx, 0x6b5416
jb 0x402b60
push 0
push 0x6b5416
push esi
lea ecx, [ebp - 0x130]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
lea ecx, [ebp - 0x128]
call fcn.00404030
test eax, eax
jne 0x402bb3
mov eax, dword [ebp - 0x140]
lea ecx, [ebp - 0x140]
push 0
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
mov esi, dword [ebp - 0x24]
cmovae eax, dword [ebp - 0x34]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x178], esi
call fcn.004051c8
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x170], ecx
mov edx, 0xf
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x15c], edx
test esi, esi
je 0x402ce8
cmp esi, 0x7fffffff
ja 0x402f54
push ecx
push ecx
push esi
push dword [ebp - 0x154]
push eax
call fcn.0040521a
mov esi, eax
mov dword [ebp - 0x174], esi
test edx, edx
jne 0x402f59
mov ecx, dword [ebp - 0x160]
cmp esi, ecx
ja 0x402c4a
cmp dword [ebp - 0x15c], 0x10
lea eax, [ebp - 0x170]
mov dword [ebp - 0x160], esi
cmovae eax, dword [ebp - 0x170]
mov byte [eax + esi], dl
jmp 0x402caa
mov edx, dword [ebp - 0x15c]
mov edi, esi
mov eax, edx
sub edi, ecx
sub eax, ecx
cmp edi, eax
ja 0x402c8f
cmp edx, 0x10
lea esi, [ebp - 0x170]
push edi
cmovae esi, dword [ebp - 0x170]
lea eax, [ecx + edi]
add esi, ecx
mov dword [ebp - 0x160], eax
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov byte [edi + esi], 0
add esp, 0xc
mov esi, dword [ebp - 0x174]
jmp 0x402caa
push ecx
push edi
mov byte [ebp - 0x174], 0
lea ecx, [ebp - 0x170]
push dword [ebp - 0x174]
push edi
call fcn.00404c90
cmp dword [ebp - 0x15c], 0x10
lea eax, [ebp - 0x170]
push esi
cmovae eax, dword [ebp - 0x170]
push eax
push dword [ebp - 0x178]
push dword [ebp - 0x154]
push dword [ebp - 0x18]
call fcn.0040521a
test edx, edx
jne 0x402f60
mov edx, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x170]
cmp edx, 0x10
mov dword [ebp - 0x80], 0x44
lea eax, [ebp - 0x170]
xorps xmm0, xmm0
cmovae eax, ecx
movlpd qword [ebp - 0x7c], xmm0
lea ecx, [ebp - 0x150]
movlpd qword [ebp - 0x74], xmm0
push ecx
lea ecx, [ebp - 0x80]
movlpd qword [ebp - 0x6c], xmm0
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push eax
push 0
movlpd qword [ebp - 0x64], xmm0
movlpd qword [ebp - 0x5c], xmm0
movlpd qword [ebp - 0x54], xmm0
movlpd qword [ebp - 0x4c], xmm0
movlpd qword [ebp - 0x44], xmm0
movups xmmword [ebp - 0x150], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x402dd9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x40740c
call fcn.00401020
mov edx, dword [ebp - 0x15c]
add esp, 8
cmp edx, 0x10
jb 0x402da3
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402d99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e2d
push edx
push ecx
call fcn.004057b8
add esp, 8
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
mov dword [ebp - 0x160], 0
cmovae eax, dword [ebp - 0x34]
push eax
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
call fcn.00405635
test edx, edx
jne 0x402f67
jmp 0x402e33
push 0xffffffffffffffff
push dword [ebp - 0x150]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x150]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x14c]
call esi
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x402da3
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402d99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402d99
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [ebp - 0x140]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_fstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_fstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x140]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x78]
mov dword [ebp + ecx - 0x144], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0xdc], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x402ea4
mov eax, dword [ebp - 0x11c]
lea ecx, [ebp - 0xec]
cmp dword [eax], ecx
jne 0x402ea4
mov edx, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xd8]
sub edx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xfc]
mov dword [eax], edx
cmp byte [ebp - 0xe0], 0
je 0x402eb8
lea ecx, [ebp - 0x128]
call fcn.00404030
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x120]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov edx, dword [ebp - 0x20]
cmp edx, 8
jb 0x402f18
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402f0e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402f0e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004057b8
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040577a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 0x1c]
call fcn.00402620
lea eax, [ebp - 0x34]
mov ecx, 0x4073e4
push eax
call fcn.00402590
call fcn.004015d0
mov ecx, edx
call fcn.00401920
mov ecx, edx
call fcn.00401920
lea eax, [ebp - 0x34]
mov ecx, 0x4073dc
push eax
call fcn.00402590
int3