Function at 0x401efa
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x40e654
call fcn.0040e1b0
sub esp, 0x8c
push ebx
push esi
push edi
lea ecx, [ebp - 0x14]
call fcn.0040d07e
xor ebx, ebx
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], ebx
call fcn.0040d07e
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 1
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.ProgramID
call fcn.0040caf0
mov ecx, dword [ebp + 8]
call fcn.0040bca5
cmp eax, ebx
jne 0x401f67
push 0x10
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
mov eax, dword [ebp + 0x10]
mov dword [eax], 0xb
xor esi, esi
jmp 0x402406
lea eax, [ebp - 0x38]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.LaunchParam
call fcn.0040caf0
mov ecx, dword [ebp + 8]
call fcn.0040bca5
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVCRT.dll_time]
mov edi, 0x415100
mov ecx, esp
mov dword [ebp + 8], esp
push edi
call fcn.0040c8b9
push ebx
mov esi, str.GENERAL
push str.LASTUPDATETIME
push esi
call fcn.004080ae
add esp, 0x10
cmp dword [0x415114], ebx
jne 0x401fce
lea ecx, [eax + 0x2a30]
cmp ecx, dword [ebp - 0x40]
jl 0x401fce
add eax, 0xffffd5d0
cmp eax, dword [ebp - 0x40]
jle 0x401ff6
call fcn.004017a6
test eax, eax
jne 0x401ff6
push 0x11
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
mov eax, dword [ebp + 0x10]
mov dword [eax], 5
jmp 0x401f60
lea ecx, [ebp - 0x34]
call fcn.0040d07e
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push 0x415128
mov byte [ebp - 4], 2
call fcn.0040caf0
push ecx
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x54], esp
push edi
call fcn.0040c8b9
push str.GRLAUNCHER_VERSION
lea eax, [ebp + 8]
push esi
push eax
mov byte [ebp - 4], 2
call fcn.00407d31
add esp, 0x18
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.0040cbc5
lea ecx, [ebp + 8]
mov byte [ebp - 4], 2
call fcn.0040ca77
lea ecx, [ebp - 0x34]
call fcn.0040d0b0
test eax, eax
je 0x402080
push 0x2d
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
mov eax, dword [ebp + 0x10]
mov dword [eax], 0x34
xor esi, esi
jmp 0x4023fa
lea eax, [ebp - 0x34]
push str.1000
push eax
call fcn.0040d164
test al, al
je 0x4020ae
push 0x12
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
mov eax, dword [ebp + 0x10]
mov dword [eax], 0xc
jmp 0x402079
lea ecx, [ebp - 0x10]
call fcn.0040d07e
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.0040d07e
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
call fcn.0040d07e
mov esi, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x30]
push esi
push eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
call fcn.0040c8b9
call fcn.00401937
add esp, 0x24
cmp dword [ebp + 0x14], ebx
je 0x4021a0
cmp eax, ebx
jne 0x40213b
push 0x13
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
mov dword [esi], 0x28
jmp 0x402198
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2c]
jge 0x40215c
push 0x14
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
mov dword [esi], 0x29
jmp 0x402198
cmp dword [0x41511c], ebx
je 0x402185
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x20]
jge 0x402185
push 0x15
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
mov dword [esi], 0x2a
jmp 0x402198
push 0x16
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
mov dword [esi], ebx
push 1
pop esi
jmp 0x4023d6
cmp eax, ebx
je 0x4021c4
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2c]
jl 0x4021c4
cmp dword [0x41511c], ebx
je 0x402257
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x20]
jge 0x402257
cmp dword [esi], 0x35
je 0x4023d4
lea eax, [ebp - 0x10]
push esi
push eax
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
mov dword [esi], ebx
call fcn.0040c8b9
call fcn.00401cbc
add esp, 0xc
cmp eax, ebx
jne 0x40220e
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x10]
push eax
call fcn.0040cbc5
cmp dword [esi], ebx
jne 0x4023d4
mov dword [esi], 0xd
jmp 0x4023d4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x30]
push esi
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0040c8b9
call fcn.00401937
add esp, 0x24
cmp eax, ebx
jne 0x402257
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x10]
push eax
call fcn.0040cbc5
jmp 0x4023d4
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], eax
jl 0x4023bd
cmp dword [0x41511c], ebx
je 0x402277
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x18], eax
jl 0x4023bd
cmp dword [ebp + 0x18], ebx
je 0x402294
push 0x18
mov dword [esi], ebx
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
jmp 0x402198
push 0x10
xor eax, eax
pop ecx
lea edi, [ebp - 0x94]
mov dword [ebp - 0x98], ebx
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x1c]
call fcn.0040d07e
push dword [ebp - 0x38]
mov byte [ebp - 4], 8
mov dword [ebp - 0x98], 0x44
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push 0x41449c
call fcn.0040caf0
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp + 0x14], esp
push eax
mov byte [ebp - 4], 9
call fcn.0040c8b9
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp + 0x18], esp
push eax
mov byte [ebp - 4], 0xa
call fcn.0040c8b9
lea eax, [ebp + 0x10]
mov byte [ebp - 4], 8
push eax
call fcn.004078a9
add esp, 0x10
push dword [eax]
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xb
push str.__s___s
push eax
call fcn.0040d9b3
add esp, 0x10
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 8
call fcn.0040ca77
push dword [ebp - 0x38]
push dword [ebp - 0x1c]
push str.ipopx_run_param:__s__s
call fcn.0040776a
add esp, 0xc
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x24]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.0040d0c0
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0040d0c0
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp dword [ebp - 0x50], ebx
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 8], eax
je 0x402378
push dword [ebp - 0x50]
call edi
cmp dword [ebp - 0x4c], ebx
je 0x402382
push dword [ebp - 0x4c]
call edi
cmp dword [ebp + 8], ebx
jne 0x4023ac
push 7
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
lea ecx, [ebp - 0x1c]
mov dword [esi], 0xe
mov byte [ebp - 4], 7
call fcn.0040ca77
jmp 0x4023d4
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 7
call fcn.0040ca77
jmp 0x402198
push 0x17
call fcn.00407741
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0040cc34
mov dword [esi], 0x15
xor esi, esi
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
call fcn.0040ca77
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.0040ca77
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call fcn.0040ca77
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.0040ca77
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.0040ca77
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040ca77
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret