Function at 0x408eb0
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff90
push ebx
push esi
xor eax, eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
xor eax, eax
push ebp
push 0x40948b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x40a0d0]
call fcn.00403b1c
mov esi, eax
mov eax, dword [0x40a114]
cmp dword [eax], 2
jne 0x4091dd
lea edx, [ebp - 0x60]
mov eax, dword [0x40a120]
mov eax, dword [eax]
call fcn.004072c4
mov eax, dword [ebp - 0x60]
mov edx, 0x4094a0
call fcn.00403a10
jne 0x408fef
mov eax, dword [0x40a118]
cmp byte [eax], 1
jne 0x408f68
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094b0
push 0
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
jmp 0x409082
lea eax, [ebp - 4]
push eax
push 0
push 0x4094c0
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 4]
push eax
push 0
push 0x1f0fff
call sub.kernel32.dll_OpenProcess
mov ebx, eax
mov edx, esi
mov eax, ebx
call fcn.0040568c
test al, al
jne 0x408fe8
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094b0
push 0
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
jmp 0x409082
mov al, 1
jmp 0x409082
lea edx, [ebp - 8]
mov eax, dword [0x40a120]
mov eax, dword [eax]
call fcn.00406b4c
cmp al, 1
jne 0x40901c
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 8]
call fcn.00406a6c
mov edx, dword [ebp - 0x64]
mov eax, dword [0x40a120]
call fcn.004037a4
jmp 0x409031
lea eax, [ebp - 0x68]
call fcn.004069f4
mov edx, dword [ebp - 0x68]
mov eax, dword [0x40a120]
call fcn.004037a4
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094d0
mov eax, dword [0x40a120]
mov eax, dword [eax]
call fcn.00403ac4
push eax
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
test al, al
jne 0x409172
mov eax, dword [0x40a120]
mov edx, 0x4094a0
call fcn.004037a4
mov eax, dword [0x40a118]
cmp byte [eax], 1
jne 0x4090ee
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094b0
push 0
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
jmp 0x409411
lea eax, [ebp - 4]
push eax
push 0
push 0x4094c0
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 4]
push eax
push 0
push 0x1f0fff
call sub.kernel32.dll_OpenProcess
mov ebx, eax
mov edx, esi
mov eax, ebx
call fcn.0040568c
test al, al
jne 0x409411
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094b0
push 0
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
jmp 0x409411
test al, al
jne 0x409411
mov edx, dword [0x40a120]
xor eax, eax
call fcn.00402ae4
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094d0
mov eax, dword [0x40a120]
mov eax, dword [eax]
call fcn.00403ac4
push eax
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
jmp 0x409411
mov eax, dword [0x40a114]
cmp dword [eax], 1
jne 0x4093a9
lea eax, [ebp - 0x6c]
call fcn.004069f4
mov edx, dword [ebp - 0x6c]
mov eax, dword [0x40a120]
call fcn.004037a4
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094d0
mov eax, dword [0x40a120]
mov eax, dword [eax]
call fcn.00403ac4
push eax
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
test al, al
jne 0x409341
mov eax, dword [0x40a120]
mov edx, 0x4094a0
call fcn.004037a4
mov eax, dword [0x40a118]
cmp byte [eax], 1
jne 0x4092bd
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094b0
push 0
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
jmp 0x409411
lea eax, [ebp - 4]
push eax
push 0
push 0x4094c0
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 4]
push eax
push 0
push 0x1f0fff
call sub.kernel32.dll_OpenProcess
mov ebx, eax
mov edx, esi
mov eax, ebx
call fcn.0040568c
test al, al
jne 0x409411
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094b0
push 0
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
jmp 0x409411
test al, al
jne 0x409411
mov edx, dword [0x40a120]
xor eax, eax
call fcn.00402ae4
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094d0
mov eax, dword [0x40a120]
mov eax, dword [eax]
call fcn.00403ac4
push eax
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
jmp 0x409411
mov eax, dword [0x40a114]
cmp dword [eax], 0
jne 0x409411
mov edx, dword [0x40a120]
xor eax, eax
call fcn.00402ae4
lea eax, [ebp - 0x5c]
mov edx, 0x44
call fcn.00404ce0
lea eax, [ebp - 0x18]
mov edx, 0x10
call fcn.00404ce0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
push 0x4094d0
mov eax, dword [0x40a120]
mov eax, dword [eax]
call fcn.00403ac4
push eax
call sub.kernel32.dll_CreateProcessA
mov ebx, dword [ebp - 0x18]
mov edx, esi
mov eax, ebx
call fcn.0040568c
mov eax, 0x3e8
call fcn.00406e58
mov eax, dword [0x40a0bc]
cmp byte [eax], 1
jne 0x409470
lea edx, [ebp - 0x70]
xor eax, eax
call fcn.00402ae4
mov edx, dword [ebp - 0x70]
mov eax, dword [0x40b980]
call fcn.00403a10
je 0x409470
push 0x4094d0
push 0x4094d0
push 0
mov eax, dword [0x40b980]
call fcn.00403ac4
mov ecx, eax
mov edx, 0x4094d4
xor eax, eax
call fcn.0040623c
xor eax, eax
call fcn.00408a34
push 0
call sub.kernel32.dll_ExitProcess_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x409492
lea eax, [ebp - 0x70]
mov edx, 5
call fcn.00403774
ret