Function at 0x4019f0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x419ec6
mov eax, dword fs:[0]
push eax
sub esp, 0x334
mov eax, dword [0x420314]
xor eax, ebp
mov dword [ebp - 0x2c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x308], ecx
jmp 0x401a2a
mov ecx, dword [ebp - 0x308]
call 0x401e70
test eax, eax
je 0x401a7a
mov eax, dword [ebp - 0x308]
mov dword [eax + 0xc], 1
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x308]
push eax
mov ecx, dword [edx + 4]
call ecx
push 0x4015e0
push 0x3e8
push 1
push 0
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x4213e4], eax
xor eax, eax
jmp 0x401e45
jmp 0x401a83
call 0x401240
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x401e43
call fcn.004023c0
mov dword [ebp - 0x24], eax
jmp 0x401aa6
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0
jne 0x401abe
mov dword [ebp - 0x30c], 0
jmp 0x401b1d
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3fffffff
jle 0x401ae3
mov dword [ebp - 0x310], 0
jmp 0x401b11
mov eax, dword [ebp - 0x14]
shl eax, 1
call fcn.0040ddc0
mov dword [ebp - 0x314], esp
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x314]
push ecx
call fcn.00402420
mov dword [ebp - 0x310], eax
mov edx, dword [ebp - 0x310]
mov dword [ebp - 0x30c], edx
mov eax, dword [ebp - 0x30c]
push eax
lea ecx, [ebp - 0x18]
call fcn.00402470
mov dword [ebp - 4], 0
push 0x41b6fc
mov ecx, dword [ebp - 0x10]
push ecx
lea edx, [ebp - 0x2b0]
push edx
call fcn.00401630
add esp, 0xc
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x31c], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x31c]
call fcn.004029c0
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x401b81
mov dword [ebp - 0x320], 0
jmp 0x401be0
mov ecx, dword [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3fffffff
jle 0x401ba6
mov dword [ebp - 0x324], 0
jmp 0x401bd4
mov eax, dword [ebp - 0x14]
shl eax, 1
call fcn.0040ddc0
mov dword [ebp - 0x328], esp
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x328]
push edx
call fcn.00402420
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x320], eax
mov ecx, dword [ebp - 0x320]
push ecx
lea ecx, [ebp - 0x20]
call fcn.00402470
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2b0]
call fcn.00402890
push 0x41b708
lea ecx, [ebp - 0x20]
call fcn.00402590
test eax, eax
jne 0x401d3e
push 0x41b710
mov edx, dword [ebp - 0x10]
push edx
lea eax, [ebp - 0x2cc]
push eax
call fcn.00401630
add esp, 0xc
mov dword [ebp - 0x32c], eax
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0x330], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x330]
call fcn.004029c0
push eax
mov ecx, 0x4213e8
call fcn.00402510
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2cc]
call fcn.00402890
push str.EntryName
mov edx, dword [ebp - 0x10]
push edx
lea eax, [ebp - 0x2e8]
push eax
call fcn.00401630
add esp, 0xc
mov dword [ebp - 0x334], eax
mov ecx, dword [ebp - 0x334]
mov dword [ebp - 0x338], ecx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x338]
call fcn.004029c0
push eax
mov ecx, 0x4213ec
call fcn.00402510
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2e8]
call fcn.00402890
push str.SubCmd
mov edx, dword [ebp - 0x10]
push edx
lea eax, [ebp - 0x304]
push eax
call fcn.00401630
add esp, 0xc
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x340], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x340]
call fcn.004029c0
push eax
mov ecx, 0x4213f0
call fcn.00402510
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x304]
call fcn.00402890
push 0x4015e0
push 0x3e8
push 1
push 0
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x4213e4], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x308]
push ecx
mov edx, dword [eax + 4]
call edx
jmp 0x401e28
jmp 0x401d47
mov word [ebp - 0x234], 0
push 0x206
push 0
lea eax, [ebp - 0x232]
push eax
call fcn.0040d310
add esp, 0xc
lea ecx, [ebp - 0x18]
call fcn.004025c0
push eax
lea ecx, [ebp - 0x18]
call fcn.0040c140
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.0040ddec
add esp, 0xc
mov dword [ebp - 0x294], 0
push 0x40
push 0
lea edx, [ebp - 0x290]
push edx
call fcn.0040d310
add esp, 0xc
mov dword [ebp - 0x244], 0
xor eax, eax
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x294], 0x44
mov dword [ebp - 0x268], 0x80
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x294]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x234]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
je 0x401e28
mov ecx, dword [ebp - 0x244]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.004024f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004024f0
xor eax, eax
lea esp, [ebp - 0x344]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.0040d7b7
mov esp, ebp
pop ebp
ret