Function at 0x401810
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x468
push esi
push edi
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x124]
mov dword [esp + 0x120], 0x44
rep stosd dword es:[edi], eax
mov eax, dword [0x405308]
test eax, eax
jne 0x401847
pop edi
xor eax, eax
pop esi
add esp, 0x468
ret
lea eax, [esp + 8]
lea ecx, [esp + 0x268]
push eax
push ecx
push 0x104
push 0x405360
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x401871
pop edi
pop esi
add esp, 0x468
ret
mov eax, dword [0x405308]
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
lea esi, [eax + 0xd0]
lea ecx, [eax + 0x1a]
push esi
lea esi, [eax + 0x88]
push ecx
lea edx, [eax + 0xb8]
push esi
mov esi, dword [eax + 0x221]
push edx
push esi
xor esi, esi
mov si, word [eax + 0x18]
add eax, 0x32
push esi
push eax
push ecx
push edx
lea edx, [esp + 0x28c]
push 7
push edx
lea eax, [esp + 0x48]
push str.__s___client__clientexit__gametype__d__name__s__gamename__s__s__s__joinid__d__token__d__title___s__s___s__s_
push eax
call edi
mov ecx, dword [0x405308]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
add esp, 0x34
mov al, byte [ecx + 4]
test al, al
je 0x4018e1
lea edx, [esp + 0x1c]
push 0x4050b0
push edx
call esi
mov eax, dword [0x405308]
mov cl, byte [eax + 0x21a]
test cl, cl
je 0x4018fc
lea ecx, [esp + 0x1c]
push str.__ns
push ecx
call esi
mov edx, dword [0x405308]
mov al, byte [edx + 0x39f]
test al, al
je 0x401918
lea eax, [esp + 0x1c]
push str.__notitle
push eax
call esi
mov ecx, dword [0x405308]
mov al, byte [ecx + 0x3a0]
test al, al
je 0x401934
lea edx, [esp + 0x1c]
push str.__res800
push edx
call esi
mov eax, dword [0x405308]
add eax, 0x3c6
cmp byte [eax], 0
je 0x401965
push eax
lea ecx, [esp + 0x168]
push str.__hookwndclass___s_
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x164]
lea eax, [esp + 0x1c]
push edx
push eax
call esi
mov ecx, dword [0x405308]
lea eax, [ecx + 0x23d]
mov cl, byte [ecx + 0x23d]
test cl, cl
je 0x40199d
push eax
lea edx, [esp + 0x168]
push str.__gamepass___s_
push edx
call edi
add esp, 0xc
lea eax, [esp + 0x164]
lea ecx, [esp + 0x1c]
push eax
push ecx
call esi
mov edx, dword [0x405308]
mov al, byte [edx + 0x80]
test al, al
je 0x4019b9
lea eax, [esp + 0x1c]
push str.__ama
push eax
call esi
mov ecx, dword [0x405308]
mov al, byte [ecx + 0x83]
test al, al
je 0x4019d5
lea edx, [esp + 0x1c]
push str.__nec
push edx
call esi
mov eax, dword [0x405308]
mov cl, byte [eax + 0x82]
test cl, cl
je 0x4019f0
lea ecx, [esp + 0x1c]
push str.__sor
push ecx
call esi
mov edx, dword [0x405308]
mov al, byte [edx + 0x84]
test al, al
je 0x401a0c
lea eax, [esp + 0x1c]
push str.__bar
push eax
call esi
mov ecx, dword [0x405308]
mov al, byte [ecx + 0x81]
test al, al
je 0x401a28
lea edx, [esp + 0x1c]
push str.__pal
push edx
call esi
mov eax, dword [0x405308]
mov cl, byte [eax + 0x85]
test cl, cl
je 0x401a43
lea ecx, [esp + 0x1c]
push str.__dur
push ecx
call esi
mov edx, dword [0x405308]
mov al, byte [edx + 0x86]
test al, al
je 0x401a5f
lea eax, [esp + 0x1c]
push str.__ass
push eax
call esi
lea ecx, [esp + 0x268]
lea edx, [esp + 0x36c]
push ecx
push str._s..
push edx
call edi
add esp, 0xc
lea eax, [esp + 0xc]
lea ecx, [esp + 0x120]
lea edx, [esp + 0x36c]
push eax
push ecx
push edx
push 0
push 0
push 0
push 0
lea eax, [esp + 0x38]
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x401ab2
pop edi
pop esi
add esp, 0x468
ret
mov ecx, dword [esp + 0xc]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
mov eax, dword [0x405310]
test eax, eax
je 0x401ad8
push 6
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
pop edi
mov eax, 1
pop esi
add esp, 0x468
ret