Function at 0x401cfc
Capabilities:
Create process on windows
Create process suspended
Set console window title
Set current directory
Set environment variable

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ecx
sub esp, 0xec
mov dword [esp], 0x400000
call fcn.004010bb
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x401d33
mov dword [esp], str.Out_of_memory_on_startup
call fcn.0040107f
lea eax, [ebp - 0x2c]
mov dword [esp + 8], 2
mov edx, dword [ebp - 0x1c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00401208
lea eax, [ebp - 0x3c]
mov dword [esp + 8], 0x7fff
mov edx, dword [ebp - 0x1c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00401a32
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, dword [ebp - 0x24]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x3c]
mov dword [esp], eax
call fcn.00401b55
movdqu xmm0, xmmword [ebp - 0x3c]
movups xmmword [ebp - 0x4c], xmm0
mov dword [esp + 4], 0
lea eax, [ebp - 0x3c]
mov dword [esp], eax
call fcn.00401b1f
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], eax
mov dword [esp], str.W64DEVKIT_HOME
mov eax, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
call eax
sub esp, 8
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
call eax
sub esp, 4
test eax, eax
je 0x401e1b
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, dword [ebp - 0x24]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004016e6
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x401e1b
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
call fcn.00401c98
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov dword [esp], str.HOME
mov eax, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
call eax
sub esp, 8
movdqu xmm0, xmmword [ebp - 0x4c]
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0xc0], str._bin_
mov dword [ebp - 0xbc], 5
mov eax, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
lea eax, [ebp - 0x3c]
mov dword [esp], eax
call fcn.00401a8a
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov eax, dword [ebp - 0x24]
mov dword [esp + 0x10], eax
mov dword [esp + 4], str.PATH
lea eax, [ebp - 0x3c]
mov dword [esp], eax
call fcn.00401c02
mov dword [esp + 4], 0
lea eax, [ebp - 0x3c]
mov dword [esp], eax
call fcn.00401b1f
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x401eb5
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], eax
mov dword [esp], str.PATH
mov eax, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
call eax
sub esp, 8
test eax, eax
jne 0x401ec1
mov dword [esp], str.Failed_to_configure__PATH
call fcn.0040107f
mov dword [esp + 4], str.1.21.0
mov dword [esp], str.W64DEVKIT
mov eax, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
call eax
sub esp, 8
mov dword [esp], 0x404126
mov eax, dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
call eax
sub esp, 4
movdqu xmm0, xmmword [ebp - 0x4c]
movups xmmword [ebp - 0x3c], xmm0
mov esi, str._bin_busybox.exe
mov edi, 0x10
mov dword [esp + 4], esi
mov dword [esp + 8], edi
lea eax, [ebp - 0x3c]
mov dword [esp], eax
call fcn.00401a8a
mov dword [esp + 4], 0
lea eax, [ebp - 0x3c]
mov dword [esp], eax
call fcn.00401b1f
pxor xmm0, xmm0
movups xmmword [ebp - 0x90], xmm0
movups xmmword [ebp - 0x80], xmm0
movups xmmword [ebp - 0x70], xmm0
movups xmmword [ebp - 0x60], xmm0
movd dword [ebp - 0x50], xmm0
mov dword [ebp - 0x90], 0x44
mov dword [ebp - 0xac], 0x680073
mov dword [ebp - 0xa8], 0x2d0020
mov dword [ebp - 0xa4], 0x6c
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0xa0]
mov dword [esp + 0x24], edx
lea edx, [ebp - 0x90]
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
lea edx, [ebp - 0xac]
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateProcessW]
call eax
sub esp, 0x28
test eax, eax
jne 0x401fd6
mov dword [esp], str.Failed_to_launch_a_login_shell
call fcn.0040107f
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.0040111f
mov eax, dword [ebp - 0xa0]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0xb0]
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
call eax
sub esp, 8
mov eax, dword [ebp - 0xb0]
lea esp, [ebp - 0xc]
pop ecx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret