Function at 0x40a54c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe90
push ebx
push esi
push edi
mov ebx, dword [ebp + 0xc]
movsx eax, byte [ebx]
cmp eax, 0x61
jb 0x40a566
sub eax, 0x20
cmp eax, 0x41
jb 0x40a576
cmp eax, 0x5a
ja 0x40a576
cmp byte [ebx + 1], 0x3a
je 0x40a594
push 0x2f
push ebx
call fcn.004088e8
add esp, 8
test eax, eax
jne 0x40a594
push 0x5c
push ebx
call fcn.004088e8
add esp, 8
test eax, eax
je 0x40a599
xor edx, edx
mov dword [ebp + 0x18], edx
xor esi, esi
push 0x2e
push ebx
call fcn.00408ae4
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x40a601
mov edx, dword [ebp + 0x18]
lea ecx, [ebp - 0x110]
push edx
push 0x40e475
push ecx
push ebx
call fcn.0040a344
add esp, 0x10
mov edi, eax
test eax, eax
je 0x40a65e
push 0x40e476
mov edx, dword [ebp - 0xc]
push edx
call fcn.00408990
add esp, 8
test eax, eax
je 0x40a5fa
push 0x40e47b
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00408990
add esp, 8
test eax, eax
jne 0x40a65e
mov esi, 1
jmp 0x40a65e
mov eax, dword [ebp + 0x18]
lea edx, [ebp - 0x110]
push eax
push str..EXE
push edx
push ebx
call fcn.0040a344
add esp, 0x10
mov edi, eax
test eax, eax
jne 0x40a65e
mov edx, dword [ebp + 0x18]
lea ecx, [ebp - 0x110]
push edx
push str..BAT
push ecx
push ebx
call fcn.0040a344
add esp, 0x10
mov edi, eax
mov esi, eax
test eax, eax
jne 0x40a65e
mov edx, dword [ebp + 0x18]
lea ecx, [ebp - 0x110]
push edx
push str..CMD
push ecx
push ebx
call fcn.0040a344
add esp, 0x10
mov edi, eax
mov esi, eax
test edi, edi
je 0x40a678
test esi, esi
je 0x40a68a
push str.COMSPEC
call fcn.00409e50
pop ecx
mov dword [ebp - 8], eax
test eax, eax
jne 0x40a68a
mov dword [0x40e340], 2
or eax, 0xffffffff
jmp 0x40a8b7
test esi, esi
je 0x40a6a7
mov edx, dword [ebp + 0x10]
push edx
push 0x40e497
mov ecx, dword [ebp - 8]
push ecx
call fcn.0040a3fc
add esp, 0xc
mov ebx, eax
jmp 0x40a6c0
mov eax, dword [ebp + 0x10]
add eax, 4
push eax
push 0
mov edx, dword [ebp + 0x10]
mov ecx, dword [edx]
push ecx
call fcn.0040a3fc
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x40a6d6
mov dword [0x40e340], 8
or eax, 0xffffffff
jmp 0x40a8b7
cmp dword [ebp + 0x14], 0
jne 0x40a6e0
xor edi, edi
jmp 0x40a709
mov eax, dword [ebp + 0x14]
push eax
call fcn.0040a4e8
pop ecx
mov edi, eax
test eax, eax
jne 0x40a709
mov dword [0x40e340], 8
push ebx
call fcn.004092f0
pop ecx
or eax, 0xffffffff
jmp 0x40a8b7
call dword [0x40e3c0]
push 0x44
push 0
lea edx, [ebp - 0x160]
push edx
call fcn.004014c0
add esp, 0xc
mov dword [ebp - 0x160], 0x44
mov word [ebp - 0x130], 0xa
cmp dword [0x40cf84], 0
je 0x40a774
push 0
call dword [0x40da00]
pop ecx
mov word [ebp - 0x12e], ax
movzx ecx, word [ebp - 0x12e]
push ecx
call fcn.004093f8
pop ecx
mov dword [ebp - 0x12c], eax
test eax, eax
je 0x40a6f0
mov edx, dword [ebp - 0x12c]
push edx
call dword [0x40da00]
pop ecx
mov dword [ebp - 0x11c], 0xc
xor ecx, ecx
lea eax, [ebp - 0x170]
mov dword [ebp - 0x118], ecx
lea edx, [ebp - 0x160]
mov dword [ebp - 0x114], 1
push eax
push edx
push 0
push edi
cmp dword [ebp + 8], 4
mov ecx, 8
je 0x40a7af
add ecx, 0xfffffff8
push ecx
push 1
lea eax, [ebp - 0x11c]
push eax
lea edx, [ebp - 0x11c]
push edx
push ebx
test esi, esi
je 0x40a7ca
mov ecx, dword [ebp - 8]
jmp 0x40a7d0
lea ecx, [ebp - 0x110]
push ecx
call sub.KERNEL32.dll_CreateProcessA
dec eax
je 0x40a817
call sub.KERNEL32.dll_GetLastError
and eax, 0xffff
dec eax
je 0x40a7f7
sub eax, 7
je 0x40a7fe
sub eax, 0x51
jne 0x40a805
mov eax, 0x2a
jmp 0x40a80a
mov eax, 0x13
jmp 0x40a80a
mov eax, 8
jmp 0x40a80a
mov eax, 0x15
mov dword [0x40e340], eax
or esi, 0xffffffff
jmp 0x40a8a7
mov eax, dword [ebp + 8]
sub eax, 1
jb 0x40a82c
je 0x40a867
dec eax
je 0x40a882
dec eax
sub eax, 2
jb 0x40a85b
jmp 0x40a898
push 0xffffffffffffffff
mov edx, dword [ebp - 0x170]
push edx
call sub.KERNEL32.dll_WaitForSingleObject
lea ecx, [ebp - 4]
push ecx
mov eax, dword [ebp - 0x170]
push eax
call sub.KERNEL32.dll_GetExitCodeProcess
mov edx, dword [ebp - 0x170]
push edx
call sub.KERNEL32.dll_CloseHandle
mov esi, dword [ebp - 4]
jmp 0x40a89b
mov eax, dword [ebp - 0x170]
push eax
call sub.KERNEL32.dll_CloseHandle
mov edx, dword [ebp - 0x170]
push edx
mov ecx, dword [ebp - 0x168]
push ecx
call dword [0x40e46c]
add esp, 8
mov esi, eax
jmp 0x40a89b
push edi
call fcn.004092f0
pop ecx
push ebx
call fcn.004092f0
pop ecx
push 0
call fcn.00409e00
pop ecx
or esi, 0xffffffff
mov eax, dword [ebp - 0x16c]
push eax
call sub.KERNEL32.dll_CloseHandle
push edi
call fcn.004092f0
pop ecx
push ebx
call fcn.004092f0
pop ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret