Function at 0x40e0f8
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x40e100
push ecx
push ebx
push esi
xor eax, eax
push ebp
push 0x40e3fe
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x416b14
mov edx, 0x40e418
call fcn.00403780
mov byte [ebp - 1], 0
push 1
push 0
push 0
lea eax, [ebp - 0x14]
mov ecx, dword [0x416af0]
mov edx, 0x40e470
call fcn.004038f0
mov eax, dword [ebp - 0x14]
call fcn.00403aa4
push eax
push 0x40e478
push 0
call sub.shell32.dll_ShellExecuteA
mov ebx, eax
cmp ebx, 0x20
jae 0x40e19d
push 0x40e488
mov eax, ebx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1c]
call fcn.00405440
push dword [ebp - 0x1c]
push 0x40e49c
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.00406684
push dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00403964
mov eax, dword [ebp - 0x18]
call fcn.00413eb4
xor ebx, ebx
call fcn.0040df88
test al, al
jne 0x40e1b8
inc ebx
push 0x258
call sub.kernel32.dll_Sleep
cmp bl, 0xa
jb 0x40e19f
xor esi, esi
cmp bl, 0xa
jb 0x40e238
push 0
push 0x40e4a0
inc eax
add al, ch
stc
invalid
invalid
dec dword [ebx + 0x75f685f0]
push cs
push 0
push 0x40e4ac
call sub.user32.dll_FindWindowA
mov esi, eax
push esi
call sub.user32.dll_SetForegroundWindow
call fcn.0040df88
test al, al
jne 0x40e22e
push 1
push 0
push 0
mov edx, 0x40e470
lea eax, [ebp - 0x24]
mov ecx, dword [0x416af0]
call fcn.004038f0
mov eax, dword [ebp - 0x24]
call fcn.00403aa4
push eax
push 0x40e478
push 0
call sub.shell32.dll_ShellExecuteA
push 0x3e8
call sub.kernel32.dll_Sleep
push esi
call sub.user32.dll_SetForegroundWindow
jmp 0x40e238
push 0x3e8
call sub.kernel32.dll_Sleep
mov eax, dword [0x41524c]
push eax
mov ecx, 0x40e4c0
mov edx, 0x40e4d0
mov eax, 0x80000002
call fcn.00406d20
mov ebx, eax
inc ebx
mov eax, 0x416b14
mov edx, 0x40e518
call fcn.00403780
lea eax, [ebp - 0x28]
mov ecx, 0x40e580
mov edx, dword [0x416adc]
call fcn.004038f0
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0xc]
call fcn.0040c57c
lea eax, [ebp - 0x2c]
mov ecx, 0x40e594
mov edx, dword [0x416adc]
call fcn.004038f0
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x10]
call fcn.0040c57c
push 0x40e5a8
lea edx, [ebp - 0x30]
mov eax, 0x77
call fcn.00405420
push dword [ebp - 0x30]
push 0x40e5b8
push dword [0x416af8]
push 0x40e5b8
push 0x40e4c0
push 0x40e5c4
lea edx, [ebp - 0x34]
xor eax, eax
mov al, bl
call fcn.00405420
push dword [ebp - 0x34]
push 0x40e5b8
push dword [ebp - 0xc]
push 0x40e5b8
push 0x40e5b8
push 0x40e5b8
push dword [ebp - 0x10]
lea eax, [ebp - 8]
mov edx, 0xe
call fcn.00403964
mov eax, dword [ebp - 8]
call fcn.004067a0
test al, al
jne 0x40e31b
mov eax, 0x40e5d0
call fcn.00413eb4
lea edx, [ebp - 0x3c]
mov eax, 0x40e5e0
call fcn.00404c9c
push dword [ebp - 0x3c]
push 0x40e5f4
push 0x40e600
lea edx, [ebp - 0x40]
mov eax, 0x40e60c
call fcn.00404c9c
push dword [ebp - 0x40]
push 0x40e5f4
push 0x40e618
lea eax, [ebp - 0x38]
mov edx, 6
call fcn.00403964
mov eax, dword [ebp - 0x38]
call fcn.00404dec
push 0x3e8
call sub.kernel32.dll_Sleep
mov eax, 0x40e49c
call fcn.004067a0
push 0
push esi
call sub.user32.dll_EnableWindow
mov eax, 0x40e624
call fcn.00404dec
push 0x1f4
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x44]
mov eax, 0x40e638
call fcn.00404c9c
mov eax, dword [ebp - 0x44]
call fcn.00404dec
xor eax, eax
mov al, bl
push eax
mov edx, 0x40e4d0
mov ecx, 0x40e4c0
mov eax, 0x80000002
call fcn.00406ffc
push 0x7530
call sub.kernel32.dll_Sleep
call fcn.004065d0
test al, al
je 0x40e3e3
cmp bl, 3
jbe 0x40e3e3
mov byte [ebp - 1], 1
call fcn.0040a038
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40e405
lea eax, [ebp - 0x44]
mov edx, 0x10
call fcn.00403750
ret