Function at 0x419aa0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x438460
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2f8
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x304]
mov ecx, 0xbe
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0xffffffff
je 0x419fdd
mov ecx, dword [ebp - 0x10]
call sub.MFC42D.DLL_Ordinal_1313
push 0x43d0e0
push 1
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0x238]
push eax
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 0x64]
call sub.MFC42D.DLL_Ordinal_2619
mov dword [ebp - 0x26c], eax
mov edx, dword [ebp - 0x26c]
mov dword [ebp - 0x270], edx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x270]
push eax
call sub.MFC42D.DLL_Ordinal_813
mov byte [ebp - 0x234], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call sub.MFC42D.DLL_Ordinal_684
mov ecx, dword [ebp - 0x234]
and ecx, 0xff
test ecx, ecx
je 0x419bad
push 0
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 0x64]
call sub.MFC42D.DLL_Ordinal_2619
mov dword [ebp - 4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x23c], esp
lea edx, [ebp - 0x18]
push edx
call sub.MFC42D.DLL_Ordinal_485
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x10]
call fcn.0041a0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call sub.MFC42D.DLL_Ordinal_684
jmp 0x419fd5
push 0
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x10]
mov ecx, dword [edx + 0x64]
call sub.MFC42D.DLL_Ordinal_2619
mov dword [ebp - 4], 2
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x240]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.0041a410
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x27c], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x20]
push ecx
call sub.MFC42D.DLL_Ordinal_899
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call sub.MFC42D.DLL_Ordinal_684
lea edx, [ebp - 0x24]
push edx
mov ecx, dword [ebp - 0x10]
call fcn.0041a500
mov byte [ebp - 4], 6
push 0x43eb48
lea eax, [ebp - 0x24]
push eax
call sub.MFC42D.DLL_Ordinal_824
and eax, 0xff
test eax, eax
je 0x419d2e
push 1
push 0
push 1
push 1
push 0
push ecx
mov esi, esp
mov dword [ebp - 0x244], esp
lea ecx, [ebp - 0x1c]
push ecx
push 0x43d378
mov edx, dword [ebp - 0x10]
add edx, 0x190
push edx
lea eax, [ebp - 0x248]
push eax
call sub.MFC42D.DLL_Ordinal_901
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x284], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x284]
push edx
push esi
call sub.MFC42D.DLL_Ordinal_899
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x24c], esp
lea edx, [ebp - 0x20]
push edx
call sub.MFC42D.DLL_Ordinal_485
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x294], eax
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x250], esp
lea edx, [ebp - 0x24]
push edx
call sub.MFC42D.DLL_Ordinal_485
mov dword [ebp - 0x298], eax
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 7
call fcn.00424070
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x248]
call sub.MFC42D.DLL_Ordinal_684
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x24]
call sub.MFC42D.DLL_Ordinal_684
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20]
call sub.MFC42D.DLL_Ordinal_684
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call sub.MFC42D.DLL_Ordinal_684
jmp 0x419fdd
mov esi, esp
push 1
lea eax, [ebp - 0x254]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.0041a2e0
mov dword [ebp - 0x29c], eax
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2a0]
call sub.MFC42D.DLL_Ordinal_880
push eax
push 0
lea ecx, [ebp - 0x20]
call sub.MFC42D.DLL_Ordinal_880
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp esi, esp
call sub.MSVCRTD.dll__chkesp
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x254]
call sub.MFC42D.DLL_Ordinal_684
cmp dword [ebp - 0x28], 0x20
jg 0x419fae
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x1f
je 0x419db1
cmp dword [ebp - 0x2c], 0x1b
jne 0x419f5d
push 0
push 0x43ed28
push 0x1004
push 0
push 0
push 1
lea ecx, [ebp - 0x228]
call sub.MFC42D.DLL_Ordinal_343
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x198], 0x43ed08
lea eax, [ebp - 0x258]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.0041a2e0
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a8], ecx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x2a8]
call sub.MFC42D.DLL_Ordinal_880
mov dword [ebp - 0x19c], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x258]
call sub.MFC42D.DLL_Ordinal_684
lea ecx, [ebp - 0x228]
call sub.MFC42D.DLL_Ordinal_1863
cmp eax, 1
jne 0x419f4c
lea edx, [ebp - 0x22c]
push edx
lea ecx, [ebp - 0x228]
call sub.MFC42D.DLL_Ordinal_2799
mov byte [ebp - 4], 0xd
push 0x43ed04
lea eax, [ebp - 0x20]
push eax
push 0x43ed04
lea ecx, [ebp - 0x25c]
push ecx
call sub.MFC42D.DLL_Ordinal_903
mov dword [ebp - 0x2ac], eax
mov edx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2b0], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x260]
push ecx
call sub.MFC42D.DLL_Ordinal_901
mov dword [ebp - 0x2b4], eax
mov edx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2b8], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x20]
call sub.MFC42D.DLL_Ordinal_734
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x260]
call sub.MFC42D.DLL_Ordinal_684
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x25c]
call sub.MFC42D.DLL_Ordinal_684
push 0x5c
lea ecx, [ebp - 0x22c]
call sub.MFC42D.DLL_Ordinal_4403
add eax, 1
push eax
lea ecx, [ebp - 0x230]
push ecx
lea ecx, [ebp - 0x22c]
call sub.MFC42D.DLL_Ordinal_3403
mov byte [ebp - 4], 0x10
mov esi, esp
push 1
lea ecx, [ebp - 0x230]
call sub.MFC42D.DLL_Ordinal_880
push eax
lea ecx, [ebp - 0x20]
call sub.MFC42D.DLL_Ordinal_880
push eax
lea ecx, [ebp - 0x22c]
call sub.MFC42D.DLL_Ordinal_880
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp esi, esp
call sub.MSVCRTD.dll__chkesp
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230]
call sub.MFC42D.DLL_Ordinal_684
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x22c]
call sub.MFC42D.DLL_Ordinal_684
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x228]
call fcn.0041a000
jmp 0x419fae
push ecx
mov ecx, esp
mov dword [ebp - 0x264], esp
lea edx, [ebp - 0x20]
push edx
call sub.MFC42D.DLL_Ordinal_485
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x268], esp
push 0x43ecf4
call sub.MFC42D.DLL_Ordinal_487
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 6
call fcn.0041a560
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x24]
call sub.MFC42D.DLL_Ordinal_684
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20]
call sub.MFC42D.DLL_Ordinal_684
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call sub.MFC42D.DLL_Ordinal_684
mov ecx, dword [ebp - 0x10]
call sub.MFC42D.DLL_Ordinal_2084
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x304
cmp ebp, esp
call sub.MSVCRTD.dll__chkesp
mov esp, ebp
pop ebp
ret 8