Function at 0x40e510
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x66c7a0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x84]
lea ecx, [esp + 0x10]
push edi
call sub.MFC42u.DLL_CString::CString_6
mov esi, dword [esp + 0x88]
lea ecx, [esp + 0x14]
push esi
mov dword [esp + 0x7c], 0
call sub.MFC42u.DLL_CString::CString_6
mov ebx, 1
test esi, esi
mov byte [esp + 0x78], bl
jne 0x40e63d
push 0x23
lea ecx, [esp + 0x14]
call sub.MFC42u.DLL_CString::Find_3
mov esi, eax
cmp esi, 0xffffffff
je 0x40e63d
lea eax, [esp + 0x18]
push esi
push eax
lea ecx, [esp + 0x18]
call sub.MFC42u.DLL_CString::Mid_1
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x7c], 2
call sub.MFC42u.DLL_CString::operator_2
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x18]
push esi
push ecx
lea ecx, [esp + 0x18]
call sub.MFC42u.DLL_CString::Left
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], 3
call sub.MFC42u.DLL_CString::operator_2
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call sub.MFC42u.DLL_CString::CString
mov edx, dword [esp + 0x10]
push 0
lea eax, [esp + 0x8c]
push edx
push eax
call fcn.0042a1f0
add esp, 0xc
mov ecx, dword [esp + 0x88]
mov byte [esp + 0x78], 4
mov eax, dword [ecx - 8]
test eax, eax
je 0x40e61a
lea edx, [esp + 0x88]
lea ecx, [esp + 0x10]
push edx
call sub.MFC42u.DLL_CString::operator_2
push edi
lea ecx, [esp + 0x18]
call sub.MFC42u.DLL_CString::operator_3
jmp 0x40e62d
push edi
lea ecx, [esp + 0x14]
call sub.MFC42u.DLL_CString::operator_3
lea ecx, [esp + 0x14]
call sub.MFC42u.DLL_CString::Empty
lea ecx, [esp + 0x88]
mov byte [esp + 0x78], bl
call sub.MFC42u.DLL_CString::CString
lea eax, [esp + 0x10]
push eax
call fcn.0040e450
mov ebp, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x98]
add esp, 4
push ebp
push ecx
mov ecx, dword [esp + 0x88]
push edx
push eax
push edi
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov esi, eax
cmp esi, 0x21
jae 0x40e7cc
test edi, edi
push esi
je 0x40e6c6
lea edx, [esp + 0x8c]
push edx
call fcn.00417dc0
add esp, 8
mov eax, dword [eax]
mov ecx, dword [esp + 0x10]
push esi
push eax
push edi
push ecx
push str.ShellExecute__s:__s__failed._Error___s___ld_
mov byte [esp + 0x8c], 5
call fcn.0040db50
add esp, 0x14
mov byte [esp + 0x78], bl
lea ecx, [esp + 0x88]
jmp 0x40e6ff
lea edx, [esp + 0x8c]
push edx
call fcn.00417dc0
add esp, 8
mov eax, dword [eax]
mov ecx, dword [esp + 0x10]
push esi
push eax
push ecx
push str.ShellExecute__s__failed._Error___s___ld_
mov byte [esp + 0x88], 6
call fcn.0040db50
add esp, 0x10
mov byte [esp + 0x78], bl
lea ecx, [esp + 0x88]
call sub.MFC42u.DLL_CString::CString
xor edx, edx
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x30]
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], eax
rep stosd dword es:[edi], eax
mov dword [esp + 0x24], edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x90]
lea ecx, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x14]
push ecx
push edx
push 0
push 0
push 0
push 0
push 0
push eax
push 0
mov dword [esp + 0x54], 0x44
mov word [esp + 0x84], bp
mov dword [esp + 0x80], ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x40e76e
mov esi, 0x21
jmp 0x40e7b8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
lea ecx, [esp + 0x90]
push esi
push ecx
call fcn.00417dc0
add esp, 8
mov edx, dword [eax]
mov eax, dword [esp + 0x84]
push esi
push edx
push eax
push str.ShellExecute.CreateProcess__s__failed._Error___s___ld_
mov byte [esp + 0x88], 7
call fcn.0040db50
add esp, 0x10
lea ecx, [esp + 0x90]
mov byte [esp + 0x78], bl
call sub.MFC42u.DLL_CString::CString
mov ecx, dword [esp + 0x1c]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
call edi
mov edx, dword [esp + 0x20]
push edx
call edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x78], 0
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x78], 0xffffffff
call sub.MFC42u.DLL_CString::CString
mov ecx, dword [esp + 0x70]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x6c
ret