Function at 0x407328
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe28
push ebx
xor ecx, ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], ecx
lea ebx, [ebp - 0x1d8]
xor eax, eax
push ebp
push 0x40793d
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 4]
mov eax, 0x407954
call fcn.0040713c
lea eax, [ebp - 8]
mov edx, 0x407960
call fcn.004035e4
lea eax, [ebp - 0xc]
mov edx, 0x40798c
call fcn.004035e4
push 0
push 0
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0x4079dc
push 0x4079e4
push 0
call sub.shell32.dll_ShellExecuteA
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.00402898
mov eax, ebx
call fcn.00402634
call fcn.0040256c
mov edx, 0x4079f4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407a10
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407a30
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407a9c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407b04
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407b6c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407bd4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407c3c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407ca4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407d0c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407d74
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407ddc
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407e44
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407eac
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407f14
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407f7c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x407fe4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x40804c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x4080b4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x40811c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408184
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x4081ec
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408254
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x4082bc
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408324
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x40838c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x4083f4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x40845c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x4084c4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x40852c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408594
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x4085fc
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408664
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x4086cc
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408734
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x40879c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408804
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x40886c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x4088d4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x40893c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x4089a4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408a0c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408a70
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408a88
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408aa4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408ac4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408af4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov dl, 0x7d
mov eax, ebx
call fcn.00402bb4
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408b10
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408b2c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408b64
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov dl, 0x7d
mov eax, ebx
call fcn.00402bb4
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408b88
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408bac
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408af4
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov dl, 0x7d
mov eax, ebx
call fcn.00402bb4
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408be8
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408c0c
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408c40
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov dl, 0x7d
mov eax, ebx
call fcn.00402bb4
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408c74
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov edx, 0x408c90
mov eax, ebx
call fcn.004039b8
call fcn.00402bf0
call fcn.0040256c
mov eax, ebx
call fcn.00402954
call fcn.0040256c
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.004038b4
push eax
mov eax, dword [ebp - 4]
call fcn.004038b4
push eax
push 0x4079e4
push 0
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x407944
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00403570
ret