Function at 0x405ea0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d4
mov eax, dword [0x76dec4]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x10c], 3
mov dword [ebp - 0x110], 0
call fcn.00407c90
mov dword [ebp - 0x110], eax
mov eax, 4
imul ecx, eax, 0
mov dword [ebp + ecx - 0x120], 0x4276e8
call fcn.00406f80
test eax, eax
jne 0x405f29
push 1
lea edx, [ebp - 0x120]
push edx
push 1
push 0
push 0
push 0
call fcn.00408550
add esp, 0x18
test eax, eax
je 0x405f29
mov eax, dword [ebp - 0x110]
push eax
call fcn.00407ce0
add esp, 4
mov eax, 0xb
jmp 0x4062c1
push 0x104
push 0x76ef10
push 0x76ee08
push 0
call fcn.00407800
add esp, 0x10
mov dword [ebp - 0x10c], eax
call fcn.00406f80
test eax, eax
je 0x4061c1
push 0x104
push 0
lea ecx, [ebp - 0x108]
push ecx
call fcn.00411b60
add esp, 0xc
push 0x104
lea edx, [ebp - 0x108]
push edx
call fcn.00407650
add esp, 8
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x405fa3
cmp dword [ebp - 0x10c], 0xb
je 0x405fa3
mov dword [ebp - 0x114], 1
jmp 0x405fad
mov dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0
jne 0x4061a0
push 0x44
push 0
lea eax, [ebp - 0x190]
push eax
call fcn.00411b60
add esp, 0xc
xor ecx, ecx
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x190], 0x44
push 0x4276f8
push 0x104
lea edx, [ebp - 0x108]
push edx
call fcn.00417695
add esp, 0xc
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x190]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x108]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x406062
push 0xffffffffffffffff
mov eax, dword [ebp - 0x13c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x13c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x406085
call fcn.00407270
call fcn.004071b0
mov eax, dword [ebp - 0x110]
push eax
call fcn.00407ce0
add esp, 4
mov eax, 3
jmp 0x4062c1
push 0x104
lea ecx, [ebp - 0x108]
push ecx
call fcn.00406fe0
add esp, 8
test eax, eax
je 0x40619e
push 0x44
push 0
lea edx, [ebp - 0x1d4]
push edx
call fcn.00411b60
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x1d4], 0x44
push 0x4276fc
push 0x104
lea ecx, [ebp - 0x108]
push ecx
call fcn.00417695
add esp, 0xc
push 0x427720
push 0x104
lea edx, [ebp - 0x108]
push edx
call fcn.00417695
add esp, 0xc
push 0x76ef10
push 0x104
lea eax, [ebp - 0x108]
push eax
call fcn.00417695
add esp, 0xc
lea ecx, [ebp - 0x14c]
push ecx
lea edx, [ebp - 0x1d4]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x40617b
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x14c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x148]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40619e
call fcn.00407270
call fcn.004071b0
mov ecx, dword [ebp - 0x110]
push ecx
call fcn.00407ce0
add esp, 4
mov eax, 3
jmp 0x4062c1
jmp 0x4061bf
call fcn.00407270
mov edx, dword [ebp - 0x110]
push edx
call fcn.00407ce0
add esp, 4
mov eax, dword [ebp - 0x10c]
jmp 0x4062c1
jmp 0x4061d6
push 0x76ee08
push 0
call fcn.00407c60
add esp, 8
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x4061f4
cmp dword [ebp - 0x10c], 0xb
je 0x4061f4
mov dword [ebp - 0x118], 1
jmp 0x4061fe
mov dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0
jne 0x4062a2
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x128]
push ecx
lea edx, [ebp - 0x124]
push edx
call fcn.00406440
add esp, 0xc
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x40624c
cmp dword [ebp - 0x10c], 0xb
je 0x40624c
mov dword [ebp - 0x11c], 1
jmp 0x406256
mov dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0
jne 0x4062a2
cmp dword [ebp - 0x124], 2
jne 0x406271
cmp dword [ebp - 0x128], 5
je 0x406285
mov dword [0x76ee00], 3
mov dword [ebp - 0x10c], 7
cmp dword [ebp - 0x12c], 0
je 0x4062a2
mov dword [0x76ee00], 4
mov dword [ebp - 0x10c], 4
call fcn.004071b0
call fcn.00407270
mov eax, dword [ebp - 0x110]
push eax
call fcn.00407ce0
add esp, 4
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040fa7f
mov esp, ebp
pop ebp
ret