Function at 0x401000
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp dword [0x40d030], 1
jne 0x401033
push 0x40d034
call fcn.004042a2
add esp, 4
push 0x40d03c
call fcn.004042a2
add esp, 4
mov dword [0x40d030], 0
push 0
call fcn.004036e7
add esp, 4
cmp dword [ebp + 8], 0
je 0x40104d
cmp dword [ebp + 8], 1
jne 0x40116a
push 0x613400
mov eax, dword [0x50e480]
push eax
push 0x50d44c
call fcn.00402fa0
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x401076
mov eax, dword [ebp - 4]
jmp 0x4012f4
push 0x19
call fcn.004036e7
add esp, 4
cmp dword [ebp + 8], 1
jne 0x4010c0
push 0x64
call fcn.004036e7
add esp, 4
mov ecx, dword [ebp + 0xc]
push ecx
push 0x40d034
push 2
push 0x613400
call fcn.0040311f
add esp, 0x10
mov dword [ebp - 4], eax
push 0x613400
call fcn.004031b6
add esp, 4
mov eax, dword [ebp - 4]
jmp 0x4012f4
mov edx, dword [ebp + 0xc]
push edx
push 0x40d034
push 1
push 0x613400
call fcn.0040311f
add esp, 0x10
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x3e9
jg 0x401101
cmp dword [ebp - 8], 0x3e9
je 0x40110c
cmp dword [ebp - 8], 1
je 0x401146
cmp dword [ebp - 8], 4
je 0x401146
jmp 0x401148
cmp dword [ebp - 8], 0x3ea
je 0x401146
jmp 0x401148
push 0x64
call fcn.004036e7
add esp, 4
mov ecx, dword [ebp + 0xc]
push ecx
push 0x40d034
push 2
push 0x613400
call fcn.0040311f
add esp, 0x10
mov dword [ebp - 4], eax
push 0x613400
call fcn.004031b6
add esp, 4
mov eax, dword [ebp - 4]
jmp 0x4012f4
jmp 0x40115d
push 0x613400
call fcn.004031b6
add esp, 4
mov eax, dword [ebp - 4]
jmp 0x4012f4
push 0x613400
call fcn.004031b6
add esp, 4
push 0x32
call fcn.004036e7
add esp, 4
cmp dword [ebp + 8], 0
je 0x401184
cmp dword [ebp + 8], 2
jne 0x40129c
push 0x613400
mov edx, dword [0x60f8b8]
push edx
push 0x60e884
call fcn.00402fa0
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4011ae
mov eax, dword [ebp - 4]
jmp 0x4012f4
push 0x4b
call fcn.004036e7
add esp, 4
cmp dword [ebp + 8], 2
jne 0x4011f8
push 0x64
call fcn.004036e7
add esp, 4
mov eax, dword [ebp + 0xc]
push eax
push 0x40d03c
push 2
push 0x613400
call fcn.0040311f
add esp, 0x10
mov dword [ebp - 4], eax
push 0x613400
call fcn.004031b6
add esp, 4
mov eax, dword [ebp - 4]
jmp 0x4012f4
mov ecx, dword [ebp + 0xc]
push ecx
push 0x40d03c
push 1
push 0x613400
call fcn.0040311f
add esp, 0x10
mov dword [ebp - 4], eax
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0x3e9
jg 0x401239
cmp dword [ebp - 0xc], 0x3e9
je 0x401244
cmp dword [ebp - 0xc], 1
je 0x40127b
cmp dword [ebp - 0xc], 4
je 0x40127b
jmp 0x40127d
cmp dword [ebp - 0xc], 0x3ea
je 0x40127b
jmp 0x40127d
push 0x64
call fcn.004036e7
add esp, 4
mov eax, dword [ebp + 0xc]
push eax
push 0x40d03c
push 2
push 0x613400
call fcn.0040311f
add esp, 0x10
mov dword [ebp - 4], eax
push 0x613400
call fcn.004031b6
add esp, 4
mov eax, dword [ebp - 4]
jmp 0x4012f4
jmp 0x40128f
push 0x613400
call fcn.004031b6
add esp, 4
mov eax, dword [ebp - 4]
jmp 0x4012f4
push 0x613400
call fcn.004031b6
add esp, 4
push 0x64
call fcn.004036e7
add esp, 4
cmp dword [ebp - 4], 0x3ea
jne 0x4012ef
push 5
push 0
push 0x613504
push 0x613508
push str.open
mov ecx, dword [0x619d2c]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jbe 0x4012e8
push 0x3e8
call fcn.00404170
add esp, 4
mov eax, 0x7d1
jmp 0x4012f4
mov eax, 0x7d2
jmp 0x4012f4
mov eax, 1
mov esp, ebp
pop ebp
ret