Function at 0x407570
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c4
mov eax, dword [0x42a6dc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x103
lea eax, [ebp - 0x12f]
push 0
push eax
mov dword [ebp - 0x16c], ecx
mov byte [ebp - 0x130], 0
call fcn.0040dc80
mov al, byte [0x427e44]
movq xmm0, qword [str.pgH0BwW]
add esp, 0xc
mov byte [ebp - 0xc], al
xor eax, eax
push 0x40
movq qword [ebp - 0x14], xmm0
mov dword [ebp - 0xb], eax
mov word [ebp - 7], ax
mov byte [ebp - 5], al
call fcn.0040862d
add esp, 4
mov edi, eax
push str.qwertyuiopasdfghjklzxcvbnm01234567890
xorps xmm0, xmm0
push 0x40
push edi
mov dword [ebp - 0x164], edi
mov byte [ebp - 0x24], 0
movq qword [ebp - 0x23], xmm0
mov dword [ebp - 0x1b], 0
mov word [ebp - 0x17], 0
mov byte [ebp - 0x15], 0
xor esi, esi
call fcn.00409099
add esp, 0xc
lea eax, [ebp - 0x130]
push 0x42d180
push 0x104
push eax
call fcn.00409099
add esp, 0xc
lea eax, [ebp - 0x130]
push 0x4278a0
push 0x104
push eax
call fcn.004090ee
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0xc
mov dword [ebp - 0x168], esi
jmp 0x407656
mov edi, dword [ebp - 0x164]
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0040b17b
add esp, 4
call fcn.0040b158
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x170], eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407686
sub ecx, edx
inc ecx
cmp ecx, 0x104
jae 0x4078f4
mov byte [ebp + ecx - 0x130], al
mov ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4076a8
lea edi, [ebp - 0x130]
sub ecx, edx
lea edx, [edi + 1]
lea ebx, [ebx]
mov al, byte [edi]
inc edi
test al, al
jne 0x4076c0
mov eax, dword [ebp - 0x170]
sub edi, edx
xor edx, edx
div ecx
mov ecx, dword [ebp - 0x164]
mov al, byte [edx + ecx]
mov byte [ebp + edi - 0x130], al
call fcn.0040b158
cdq
mov ecx, 0x32
idiv ecx
push edx
call ebx
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp eax, 5
jl 0x407650
push str..exe
lea eax, [ebp - 0x130]
push 0x104
push eax
call fcn.004090ee
add esp, 0xc
push dword [ebp - 0x164]
call fcn.00409151
add esp, 4
cmp byte [ebp - 0x14], 0
mov dword [ebp - 0x134], 0xf
mov dword [ebp - 0x138], esi
mov byte [ebp - 0x148], 0
jne 0x407751
xor ecx, ecx
jmp 0x407760
lea ecx, [ebp - 0x14]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407757
sub ecx, edx
push ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x148]
call fcn.00403750
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0x160]
call fcn.00404550
cmp dword [eax + 0x14], 0x10
jb 0x407789
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x24]
push 0x10
push eax
call fcn.0040acdd
add esp, 0x10
cmp dword [ebp - 0x14c], 0x10
jb 0x4077b1
push dword [ebp - 0x160]
call fcn.00409339
add esp, 4
cmp dword [ebp - 0x134], 0x10
mov dword [ebp - 0x14c], 0xf
mov dword [ebp - 0x150], esi
mov byte [ebp - 0x160], 0
jb 0x4077df
push dword [ebp - 0x148]
call fcn.00409339
add esp, 4
push 0x42bf80
call fcn.0040ae46
mov edi, dword [ebp - 0x16c]
add esp, 4
cmp dword [edi + 0x120], eax
je 0x4078d7
mov edi, edi
lea edx, [ebp - 0x130]
lea ecx, [edi + 0x124]
call fcn.00405860
test al, al
jne 0x407840
lea eax, [esi + 1]
add esi, 2
cmp eax, 0xa
jge 0x4078ef
push 0x927c0
call ebx
lea edx, [ebp - 0x130]
lea ecx, [edi + 0x124]
call fcn.00405860
test al, al
je 0x407815
push ecx
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x130]
call fcn.004081b0
add esp, 4
test eax, eax
jne 0x4078e8
lea ecx, [ebp - 0x130]
call fcn.00407a20
test al, al
jne 0x407872
push 0x927c0
call ebx
jmp 0x407800
push 0x40
lea eax, [ebp - 0x1bc]
push 0
push eax
mov dword [ebp - 0x1c0], 0x44
call fcn.0040dc80
add esp, 0xc
xor eax, eax
mov word [ebp - 0x190], ax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x130]
push eax
push 0
mov dword [ebp - 0x194], 0x81
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x4078d7
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040903f
mov esp, ebp
pop ebp
ret
push 0x927c0
call ebx
call fcn.004074d0
call fcn.0040ab49
int3