Function at 0x4010b0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push edi
call fcn.00401320
push dword [section..data]
push str.CFInjector_v__s_n_n
push 0x410ec8
call fcn.0040213b
push 0
push 0x410ec8
call fcn.00401300
mov edi, dword [ebp + 8]
add esp, 0x14
cmp edi, 2
jge 0x40115b
push str.CFInjector_requires_at_least_one_parameter_to_work__n
call fcn.0040208f
push str.CFInjector.exe__module_name___executable_path___executable_arguments__n
call fcn.0040208f
push str._____module_name____name_of_the_module_to_look_for__sr.dll_can_be_used_for_Wizardry_8___n
call fcn.0040208f
push str._____executable_path____program_to_start__optional__n_n
call fcn.0040208f
push str._____executable_arguments____arguments_for_the_program_to_start__optional__n_n
call fcn.0040208f
push str.Examples:_n
call fcn.0040208f
push str.____CFInjector.exe__C:WizardriesW8Wiz8_v124_nocd.exe___C:WizardriesW8Wiz8_v124_nocd.exe__n
call fcn.0040208f
push str.____CFInjector.exe_sr.dll_n
call fcn.0040208f
push str.____CFInjector.exe_sr.dll_c:wizardriesWiz8_v124_nocd.exe_n
call fcn.0040208f
push str.____CFInjector.exe_sr.dll__c:Program_FilesSirtechWizardry_8Wiz8_v124_nocd.exe__n
call fcn.0040208f
push str.____CFInjector.exe__C:WizardriesW8Wiz8_v124_nocd.exe___C:WizardriesW8Wiz8_v124_nocd.exe____window__n
call fcn.0040208f
add esp, 0x2c
xor eax, eax
pop edi
pop ebp
ret
call fcn.00401730
test eax, eax
jne 0x401178
push eax
push str.libInit_FAILED_
call fcn.00401300
add esp, 8
or eax, 0xffffffff
pop edi
pop ebp
ret
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov eax, dword [ebx + 4]
push eax
mov dword [0x410004], eax
call fcn.00401dc4
add esp, 4
call fcn.00401330
call fcn.00401400
mov esi, eax
test esi, esi
jne 0x4012a8
cmp edi, 2
jle 0x40125d
mov esi, dword [ebx + 8]
cmp edi, 3
jle 0x4011b8
mov edi, dword [ebx + 0xc]
jmp 0x4011bd
mov edi, 0x40a4ac
push edi
push esi
push str._nLaunching__s__s_n
push 0x410ec8
call fcn.0040213b
push 0
push 0x410ec8
call fcn.00401300
mov edx, 0x410dc0
add esp, 0x18
mov ecx, esi
sub edx, esi
mov al, byte [ecx]
mov byte [edx + ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x4011e6
push 0x5c
push 0x410dc0
call fcn.00401e60
add esp, 8
test eax, eax
je 0x401208
mov byte [eax], 0
push 0xa
push 0x410dc0
push edi
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jg 0x40123a
push eax
push edi
push esi
push str.FAILED_to_execute__s__s:__i_n
push 0x410ec8
call fcn.0040213b
add esp, 0x14
jmp 0x40124e
push edi
push esi
push str.Successfully_executed__s__s_n
push 0x410ec8
call fcn.0040213b
add esp, 0x10
push 0
push 0x410ec8
call fcn.00401300
add esp, 8
push dword [0x410004]
push str._nLooking_for_the_process_with_module__s_n
push 0x410ec8
call fcn.0040213b
push 0
push 0x410ec8
call fcn.00401300
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0x14
push 0x3e8
call edi
push 0
push 0x40a538
call fcn.00401300
add esp, 8
call fcn.00401400
mov esi, eax
test esi, esi
je 0x401287
push 0
push 0x40a53c
call fcn.00401300
push esi
call fcn.00401000
push dword [section..data]
push str.CFInjector_v__s_Exiting..._n
push 0x410ec8
call fcn.0040213b
push 0
push 0x410ec8
call fcn.00401300
mov eax, dword [0x4116c8]
add esp, 0x20
pop esi
pop ebx
test eax, eax
je 0x4012f2
push eax
call fcn.00402003
add esp, 4
xor eax, eax
pop edi
pop ebp
ret