Function at 0x403715
Capabilities:
Accept command line arguments
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413ae8
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x85c
mov eax, dword [0x4ab1c8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x85c], ecx
and dword [ebp - 4], 0
push str.CREATE_SUSPENDED
mov eax, dword [ebp - 0x85c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x85c]
call dword [eax + 0x24]
mov dword [ebp - 0x868], str.rLLVyNNSS2oVABkPlhNBKWPJPF2XBmRy9Ah4ca803l7JTVSHmCFHMouKgFTYGvSqmqYzG7jlfpEudqUSHlI5NuAXhJyHbhE1GbKEeDQrxrGscbdbLrkrGK4Oy1VEbV8PTtW2XgAaEVUXQeje8Dn5i868nNXt8LX9Rzu4TUyIVy3qCyxvukhSj38XECDQV0D6CvKDVY7BnaMki7YiHBUglnRMXcUzQLlEk0FeRjOIDPSe7MuIKiKfSqjmwrNuud5BiqGUnbzc0P6MDqFJLTIsiYFMbujwVpAxWVKl3ntzmFbIp0UVU20szsLT9NmEm0oABE3xjRuKrMHW0RmMkE4FG23kgPbKG1S2QCtrcuKPer07FbImvcJMTKxOLdUKtCh1HenEUp0SC28Kmlx8iWNFMngnafheMd0r6akOY4V5VTlYQeBVfp4diz2R2SxgEEHzFdTEiRWrA8nqPcYVvfmqMYnYaOsBVgmXBsEUbbfObvwmT2YBSmwm0bEcqqkuqM8wN7duikMSqwzAwYcKOPpc5JVRTMUONswtMEaiJzj6clOw3Ityp0Saw959JGyYBXfnGIanX9hPtQ67LpVrmkPxhPI1nd4Ugfc2gT9SG1nunIXAsmhlM4WxhdxmQaqwt80kkH0VCJtN2q6nTPs78kAGLn7N0Vs9kibfy7q9l1TDfTQWBYalx5s44MAv1ukCngKT2jPj8jlgOYFrwzAOo6VvGRx8M0gQxxygVc8MdxLjbF332jGbeUUq2uMIMPtN8za8DoHxG5oGocr3TRbRHJQMq2pCayczPIW7Cdv5yIEGaYlMgRybDsEb1hNwHWHiMnYGvEYvGLlTQDhGGS2eWHNISsyrO0fbqNc74r4uPVrfr1Mi4sEXLNf81jAGzS7xEhcvd0gjhLwKOaHbQ1KFHMV4uCrP2kkqUYQade2jSt6eNJyKWFSoa70Bt70L9k46zicWVRsfcUIDOY38gzqV9ckROzlAjaIvkjV1FKeFWJR6MAJ2SdgLrLUBSKHxYYARHsyHuRKAEl5qcJ6GerYAPC7CPgvx9zNRttcyqkR1B28a1ftJXrLi6DIAzyidigrEGsChwhLRPSRvLu8i0FsV5LRcMRKRrWrNCOfPQ0529PiospcVwYyPA282SiJy58ClRh7mwLNl8DAsBxHFYvbttzqF7Lc0hTHLhTWcD2hA8S23h0zW8I5yjKdou6xE5L3X6qn4fbwfyHoIocPbY3Uz0NC12deoKVdG2u7zGz1snuuaHFVWLw5pHKKAM8coiuJ5b8ua62evCET3u5fx8Rvl5Pe2TDAlBPPTQTGzroMnEWFtJ8HullYiX1aTsUQhduG3NkCnRdOFKx7U2Khu5d5ViWejpEEzifwt9P0UFKYx46O8D3WfqE9PbXAWBW0TG5xcnSireWtGCHDesmGBNNgnQaT7No6hP91joPJW8uWsnTEDYcur5MjJGinCA0q4PPd1v1kk4ICJ8Gh7qipJtCUXdOIVwfLTrJnz5YiWsrFXsg4n1k19yrM1xa6nRzCu6fKCnbtEN31lnt1RTO9ToSlVXwlIaU44b7SkDe6rA2V86aWMv6P5huAxWG17BsM37ermwgetXXDiHHXrR9exBbvFeo8BO7AfhrboGwkPPeusOY1DhfcgNXvcncRWTk9UlYvgOhdBR4Y0yx0Bh1askVnRFtxAu92Lfmr2CT8MuvJVzqE2FogxCegrcrCGJbFWbsF0OPFlTry30jF3xFf9a7KCMaG5jCs6BswC7DRd5zlMwpygfqu6rSN21vtmnfAigSWygS7eKs9klyKIthiFC1GKbSnCHAPJsPplL9ILkj2QL2zXNIS6OCtPXIAbKWFMQ0SICeV2FXKGm33HO9FtnzgsbsOfopQ7hgvK6kMVJhyebMkVvfGP2lSGxrbe0KJk2Ylx7UYYgYhFxNnoYuvRpTrTneLAlIrOybWLuWwXFXOgbyXDu0bL0DjQEzLTA1NQqCnHVKE20k4mdty6qCjmco8y0rhNiiuslIgc0cTDWnVo7Vs0jTY1iuMoEXv0paTyaEFEdw3yOClRNgGoP6PHtFs5wwCigbbSSfg6Uv8VBMfmxJ4bO8YWN9yEaGOyPIWkpVRkRQiiCDqHUPtjPfKjDUFD0BJANM52rfKdyBDVdkjymgL2myPYWzPwQfOsVFvPupjYjiJWpTBkFeTjEFrurSkjlXiIDM1cLJ91GbOLi2vhYMQr2sHS9vhYlHA3ffgJa7qxKMpu7of2nGqQuil5Al9c0ngx51IagTTEYVoNkE9DSvh5J2DTIAGeBWUEpKHpoYTniFW4ByEwuyPQa6t2XG31GnhirUlsyMkC6kCjPNeu9Uq1Soh7clE8XD7FlIzvsdEbdvf947qKJsayIm4BHygMmJgufacQuIXJX51QdbBYbR2TxOdWxG0FmOxhUmNPVwiqebSdOQiX3S1z9uFFEHWkRwFl5SJVdcTmmrBe4dkcBfmwq8EDqpmw5cjSd1638u6nu8fvKjkyu8pmQTrkAkgdVAnmW0qM22hi9AMHv11ATjpa9l2nS43fccUVuDabvJs7NcyqF2gzx9usih1G5jvrlpasxkCKsRj50qhdoS6sBzFdATBlVOOAEoqwk12r00aDgO6zyVGUO5RQwHIBgqyq8cbnzguFy5Wp82wWQmjkqLRhUvRYQ4FCBF41wc0hNjhebJsMFbqLcinNMtdaxNUyy9nha7J1Gvm1mo3SQAfv409C0yn7pqinhz6PI2cQGjHYrVTbUQWwfnmpaU0l7mrU3n7hywCzz6PUSnaNa5DkqSTlJTiv0nwUSwGEjCvD4jgjqoyjSx1cmdAut0Y2IzmiP3qYldxdnXp650tvmz9nASqCAfFOckodW6kdRWubfCyEbvVnTAt2oewdOgRgzpIYiQPfLmj6WsUOfAB6P6RjQr8rsgW8kT59VDIWKL6gfdyS7eM4vDzjLvFbg0bI8aQtYLbain3EqcsASIpSfTe4KiF3yRKKXX2SyJMCB9xW
push 0x400
lea eax, [ebp - 0x814]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x864], str.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
mov dword [ebp - 0x86c], str.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
push 0x44
push 0
lea eax, [ebp - 0x858]
push eax
call fcn.00409740
add esp, 0xc
push 0x4ac304
lea eax, [ebp - 0x858]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
lea eax, [ebp - 0x814]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x4037fd
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004090dc
leave
ret