Function at 0x40adf0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e0b00
mov eax, dword fs:[0]
push eax
mov eax, 0x10b8
call fcn.005b8630
mov eax, dword [0x66a074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x10]
push 0x4bcd10
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
lea ecx, [ebp - 0x1040]
call fcn.004acbc0
push 5
push str.log_
lea ecx, [ebp - 0x1040]
call fcn.00409220
push str.enable_log
lea edx, [ebp - 0x1040]
lea ecx, [ebp - 0x1028]
call fcn.004145e0
add esp, 4
lea ecx, [ebp - 0x1028]
call fcn.004c6ca0
movzx ecx, byte [0x673629]
test al, al
mov edx, 1
cmovne ecx, edx
mov byte [0x673629], cl
lea ecx, [ebp - 0x1028]
mov dword [ebp - 4], 0
call fcn.00408ff0
lea ecx, [ebp - 0x1040]
mov dword [ebp - 4], 4
call fcn.00408ff0
cmp byte [0x673629], 0
mov dword [ebp - 4], 0xffffffff
je 0x40aec9
push 0x61d4e8
call fcn.00407e20
add esp, 4
lea ecx, [ebp - 0x10c0]
call fcn.0040aaf0
lea ecx, [ebp - 0x10c0]
call fcn.0040b230
test al, al
jne 0x40af03
cmp byte [0x673629], al
je 0x40b143
push 0x61d500
call fcn.00407e20
add esp, 4
xor esi, esi
jmp 0x40b14d
cmp dword [ebp - 0x10c0], 0
jne 0x40b10f
cmp dword [ebp - 0x1098], 8
lea esi, [ebp - 0x10ac]
cmovae esi, dword [ebp - 0x10ac]
cmp dword [ebp - 0x109c], 9
jne 0x40b0e0
mov ecx, str.startmenu
mov edx, 9
sub esi, ecx
nop dword [eax]
mov ax, word [esi + ecx]
cmp ax, word [ecx]
jne 0x40b0e0
add ecx, 2
sub edx, 1
jne 0x40af40
push edi
lea ecx, [ebp - 0x1040]
call fcn.00408ef0
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x1028]
xor eax, eax
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1014], 7
mov word [ebp - 0x1028], ax
mov dword [ebp - 4], 0xffffffff
call fcn.0040bca0
test al, al
je 0x40b08e
push 0x1000
lea eax, [ebp - 0x1010]
push 0
push eax
call fcn.005b9c20
add esp, 0xc
lea eax, [ebp - 0x1010]
push 0x800
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x40afe4
lea ecx, [ebp - 0x1028]
mov dword [ebp - 4], 9
call fcn.00408ff0
jmp 0x40b0a0
lea ecx, [ebp - 0x1028]
call fcn.00408e30
lea edx, [ebp - 0x1010]
mov ecx, eax
call fcn.004c8af0
test al, al
je 0x40b017
lea ecx, [ebp - 0x1028]
mov dword [ebp - 4], 0xd
call fcn.00408ff0
jmp 0x40b0a0
cmp dword [ebp - 0x1014], 8
lea esi, [ebp - 0x1028]
cmovae esi, dword [ebp - 0x1028]
call fcn.004c8210
push ecx
push esi
mov ecx, eax
call fcn.004c82f0
test al, al
je 0x40b08e
cmp dword [ebp - 0x102c], 8
lea ecx, [ebp - 0x1040]
push 5
cmovae ecx, dword [ebp - 0x1040]
lea eax, [ebp - 0x1028]
cmp dword [ebp - 0x1014], 8
push 0
cmovae eax, dword [ebp - 0x1028]
push ecx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x1028]
mov dword [ebp - 4], 0x11
call fcn.00408ff0
mov bl, 1
jmp 0x40b0a2
lea ecx, [ebp - 0x1028]
mov dword [ebp - 4], 0x15
call fcn.00408ff0
xor bl, bl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1040]
mov dword [ebp - 4], 0x19
call fcn.00408ff0
mov dword [ebp - 4], 0xffffffff
test bl, bl
je 0x40b0e0
cmp byte [0x673629], 0
je 0x40b143
push 0x61d520
call fcn.00407e20
add esp, 4
xor esi, esi
jmp 0x40b14d
lea ecx, [ebp - 0x10c0]
call fcn.0040bf40
test al, al
jne 0x40b108
cmp byte [0x673629], al
je 0x40b143
push 0x61d53c
call fcn.00407e20
add esp, 4
xor esi, esi
jmp 0x40b14d
mov esi, 1
jmp 0x40b14d
lea edx, [ebp - 0x10c4]
mov dword [ebp - 0x10c4], 0
lea ecx, [ebp - 0x10c0]
call fcn.0040c2d0
test al, al
jne 0x40b147
cmp byte [0x673629], al
je 0x40b143
push 0x61d55c
call fcn.00407e20
add esp, 4
xor esi, esi
jmp 0x40b14d
mov esi, dword [ebp - 0x10c4]
lea ecx, [ebp - 0x10c0]
call fcn.0040b180
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005b75ab
mov esp, ebp
pop ebp
ret 0x10