Function at 0x40e780
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x463b98
mov eax, dword fs:[0]
push eax
sub esp, 0x3b8
mov eax, dword [0x488fdc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3b4], ecx
push 0x466ca8
mov ecx, dword [ebp - 0x3b4]
add ecx, 0x2d0
call fcn.0040fdb0
push 1
push 0x40
push 2
push 0x466cb0
lea ecx, [ebp - 0x35c]
call fcn.00410fe0
mov dword [ebp - 4], 0
push 0x466cd0
lea eax, [ebp - 0x35c]
push eax
call fcn.00413c70
add esp, 8
push str.cd_C:_n
lea ecx, [ebp - 0x35c]
push ecx
call fcn.00413c70
add esp, 8
push str.vfxadmin_server_version___c:medentVsiFaxVersion4.ccs_n
lea edx, [ebp - 0x35c]
push edx
call fcn.00413c70
add esp, 8
push str.vfxadmin_version___c:medentVsiFaxVersion5.ccs_n
lea eax, [ebp - 0x35c]
push eax
call fcn.00413c70
add esp, 8
push str.vfxadmin_license__l___c:medentVsiFaxVersion6.ccs_n
lea ecx, [ebp - 0x35c]
push ecx
call fcn.00413c70
add esp, 8
lea ecx, [ebp - 0x35c]
call fcn.00411140
push 0x44
push 0
lea edx, [ebp - 0x2a4]
push edx
call fcn.004456b0
add esp, 0xc
push 0x10
push 0
lea eax, [ebp - 0x2b4]
push eax
call fcn.004456b0
add esp, 0xc
mov dword [ebp - 0x2a4], 0x44
mov dword [ebp - 0x278], 1
xor ecx, ecx
mov word [ebp - 0x274], cx
lea edx, [ebp - 0x2b4]
push edx
lea eax, [ebp - 0x2a4]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push str.C:medentGetVsiFaxVersion.bat
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x40e8ed
push 0xbb8
mov ecx, dword [ebp - 0x2b4]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x2b4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x2b0]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
push 0x40
push 1
push str.C:medentVsiFaxVersion4.ccs
lea ecx, [ebp - 0x25c]
call fcn.00411db0
mov byte [ebp - 4], 1
push 1
push 0x40
push 1
push str.C:medentVsiFaxVersion5.ccs
lea ecx, [ebp - 0xfc]
call fcn.00411db0
mov byte [ebp - 4], 2
push 1
push 0x40
push 1
push str.C:medentVsiFaxVersion6.ccs
lea ecx, [ebp - 0x1ac]
call fcn.00411db0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x25c]
call fcn.00411f30
movzx ecx, al
test ecx, ecx
je 0x40e9ec
lea ecx, [ebp - 0x378]
call fcn.00404c30
mov byte [ebp - 4], 4
lea edx, [ebp - 0x378]
push edx
lea eax, [ebp - 0x25c]
push eax
call fcn.00413fd0
add esp, 8
lea ecx, [ebp - 0x378]
call fcn.00413070
test eax, eax
jbe 0x40e9d2
push 3
push 0
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x378]
call fcn.0040fe00
mov dword [ebp - 0x3b8], eax
mov edx, dword [ebp - 0x3b8]
mov dword [ebp - 0x3bc], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x3bc]
push eax
mov ecx, dword [ebp - 0x3b4]
add ecx, 0x2d0
call fcn.00404720
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c]
call fcn.004058d0
lea ecx, [ebp - 0x25c]
call fcn.00411f50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x378]
call fcn.004058d0
lea ecx, [ebp - 0xfc]
call fcn.00411f30
movzx ecx, al
test ecx, ecx
je 0x40ea9d
lea ecx, [ebp - 0x394]
call fcn.00404c30
mov byte [ebp - 4], 6
lea edx, [ebp - 0x394]
push edx
lea eax, [ebp - 0x25c]
push eax
call fcn.00413fd0
add esp, 8
lea ecx, [ebp - 0x394]
call fcn.00413070
test eax, eax
jbe 0x40ea83
push 3
push 8
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x394]
call fcn.0040fe00
mov dword [ebp - 0x3c0], eax
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x3c4], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x3c4]
push eax
mov ecx, dword [ebp - 0x3b4]
add ecx, 0x2d0
call fcn.00404720
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x48]
call fcn.004058d0
lea ecx, [ebp - 0xfc]
call fcn.00411f50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x394]
call fcn.004058d0
lea ecx, [ebp - 0x1ac]
call fcn.00411f30
movzx ecx, al
test ecx, ecx
je 0x40eb37
lea ecx, [ebp - 0x3b0]
call fcn.00404c30
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x1ac]
mov eax, dword [edx + 4]
lea ecx, [ebp + eax - 0x1ac]
call fcn.0040bd30
movzx ecx, al
test ecx, ecx
jne 0x40eb1d
lea edx, [ebp - 0x3b0]
push edx
lea eax, [ebp - 0x1ac]
push eax
call fcn.00413fd0
add esp, 8
lea ecx, [ebp - 0x3b0]
call fcn.00413070
test eax, eax
jbe 0x40eb1b
lea ecx, [ebp - 0x3b0]
push ecx
mov ecx, dword [ebp - 0x3b4]
add ecx, 0x2ec
call fcn.00410ee0
jmp 0x40eac2
lea ecx, [ebp - 0x1ac]
call fcn.00411f50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3b0]
call fcn.004058d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1ac]
call fcn.0040fd40
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xfc]
call fcn.0040fd40
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x25c]
call fcn.0040fd40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x35c]
call fcn.0040fd10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044545a
mov esp, ebp
pop ebp
ret