Function at 0x40da25
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44cdac
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7a4
push esi
push edi
mov dword [ebp - 0x7b0], ecx
lea ecx, [ebp - 0x480]
call fcn.00404590
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x688]
call fcn.00404590
mov byte [ebp - 4], 1
mov dword [ebp - 0x484], 0
mov ecx, 0xc
mov esi, 0x45ed28
lea edi, [ebp - 0x27c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x34
xor eax, eax
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x60], 0
mov ecx, 0x10
xor eax, eax
lea edi, [ebp - 0x5c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x60], 0x44
mov ecx, 0x468690
call fcn.00404600
push eax
call fcn.0042a790
add esp, 4
cmp eax, 0x200
jae 0x40daf7
mov ecx, 0x468690
call fcn.00404600
push eax
lea ecx, [ebp - 0x47c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x40db1d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x688]
call fcn.0043de93
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x480]
call fcn.0043de93
jmp 0x40dd7d
push 0x45ed58
lea edx, [ebp - 0x47c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, 0x46868c
call fcn.00404600
push eax
lea eax, [ebp - 0x47c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x64]
call fcn.00404590
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0x47c]
push edx
call fcn.0042a93e
add esp, 8
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 0xffffffff
jne 0x40dce4
push 0x200
push 0
lea eax, [ebp - 0x47c]
push eax
call fcn.0042aa90
add esp, 0xc
mov ecx, 0x468690
call fcn.00404600
push eax
call fcn.0042a790
add esp, 4
cmp eax, 0x200
jae 0x40dbc6
mov ecx, 0x468690
call fcn.00404600
push eax
lea ecx, [ebp - 0x47c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x40dbf8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0043de93
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x688]
call fcn.0043de93
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x480]
call fcn.0043de93
jmp 0x40dd7d
push 0x45ed5c
lea edx, [ebp - 0x47c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x469afd
lea eax, [ebp - 0x47c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x47c]
push ecx
push 0x45ed60
call fcn.00414290
add esp, 8
lea ecx, [ebp - 0x7ac]
call fcn.00404590
mov byte [ebp - 4], 3
lea edx, [ebp - 0x7a4]
push edx
lea eax, [ebp - 0x47c]
push eax
call fcn.0042a93e
add esp, 8
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 0xffffffff
jne 0x40dcc4
push 0x45ed80
push 0x45ed8c
push 0x45ed98
push 0x45eda8
mov ecx, dword [ebp - 0x7b0]
call fcn.0041200b
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x7ac]
call fcn.0043de93
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0043de93
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x688]
call fcn.0043de93
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x480]
call fcn.0043de93
jmp 0x40dd7d
mov ecx, dword [ebp - 0x7a8]
push ecx
call fcn.0042aa0b
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x7ac]
call fcn.0043de93
jmp 0x40dcf3
mov edx, dword [ebp - 0x68c]
push edx
call fcn.0042aa0b
add esp, 4
lea eax, [ebp - 0x27c]
push eax
mov ecx, dword [ebp - 0x7b0]
call fcn.0040e4be
lea ecx, [ebp - 0x47c]
push ecx
lea edx, [ebp - 0x27c]
push edx
push 0x45edac
lea eax, [ebp - 0x684]
push eax
call fcn.0042ada4
add esp, 0x10
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x60]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x684]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 0x484], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0043de93
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x688]
call fcn.0043de93
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x480]
call fcn.0043de93
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret