Function at 0x410a60
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4dc
push 0x4205c5
lea ecx, [ebp - 0x454]
call fcn.0041a740
cmp dword [0x64a6bc], 0
jne 0x410b94
push 0x4205c6
mov ecx, 0x64ab78
call fcn.0041a820
push str..exe
lea eax, [ebp - 0x478]
push eax
push 8
lea ecx, [ebp - 0x460]
push ecx
call fcn.00418b60
add esp, 8
push eax
lea edx, [ebp - 0x46c]
push edx
mov ecx, 0x64ab78
call fcn.0041a920
mov ecx, eax
call fcn.0041a9b0
push eax
mov ecx, 0x64ab78
call fcn.0041a8a0
lea ecx, [ebp - 0x478]
call fcn.0041a800
lea ecx, [ebp - 0x46c]
call fcn.0041a800
lea ecx, [ebp - 0x460]
call fcn.0041a800
push 0x64ab78
lea eax, [ebp - 0x49c]
push eax
push 0x420ba4
lea ecx, [ebp - 0x490]
push ecx
mov edx, dword [0x64a4a4]
push edx
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x454]
call fcn.0041a9b0
mov ecx, eax
call fcn.0041a9b0
mov ecx, eax
call fcn.0041a920
push eax
lea ecx, [ebp - 0x454]
call fcn.0041a8a0
lea ecx, [ebp - 0x49c]
call fcn.0041a800
lea ecx, [ebp - 0x490]
call fcn.0041a800
lea ecx, [ebp - 0x484]
call fcn.0041a800
mov ecx, dword [0x4493c8]
push ecx
push 0x42bbc8
sub esp, 0xc
mov ecx, esp
lea edx, [ebp - 0x454]
push edx
call fcn.0041a7a0
call fcn.004196c0
add esp, 0x14
mov dword [0x64a6bc], 1
jmp 0x410c00
push 0x64ab78
lea eax, [ebp - 0x4c4]
push eax
push 0x420c2c
lea ecx, [ebp - 0x4b8]
push ecx
mov edx, dword [0x64a4a4]
push edx
lea eax, [ebp - 0x4ac]
push eax
lea ecx, [ebp - 0x454]
call fcn.0041a9b0
mov ecx, eax
call fcn.0041a9b0
mov ecx, eax
call fcn.0041a920
push eax
lea ecx, [ebp - 0x454]
call fcn.0041a8a0
lea ecx, [ebp - 0x4c4]
call fcn.0041a800
lea ecx, [ebp - 0x4b8]
call fcn.0041a800
lea ecx, [ebp - 0x4ac]
call fcn.0041a800
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
push 0x3e8
push 0
lea ecx, [ebp - 0x400]
push ecx
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
lea ecx, [ebp + 0x38]
call fcn.0041aad0
push eax
lea edx, [ebp - 0x400]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push str._1111111
lea eax, [ebp - 0x400]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp + 0x14]
call fcn.0041aad0
push eax
lea ecx, [ebp - 0x400]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x420d80
lea edx, [ebp - 0x400]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp + 0x90]
call fcn.0041aad0
push eax
lea eax, [ebp - 0x400]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x420d84
lea ecx, [ebp - 0x400]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0x400]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 4]
push edx
call fcn.00418ea0
add esp, 0x10
push 0x10
push 0
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
push 0x44
push 0
lea ecx, [ebp - 0x448]
push ecx
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
lea eax, [ebp - 0x4dc]
push eax
push 0x420d88
lea ecx, [ebp - 0x4d0]
push ecx
lea ecx, [ebp - 0x454]
call fcn.0041a9b0
mov ecx, eax
call fcn.0041a9b0
push eax
lea ecx, [ebp - 0x454]
call fcn.0041a8a0
lea ecx, [ebp - 0x4dc]
call fcn.0041a800
lea ecx, [ebp - 0x4d0]
call fcn.0041a800
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0x448]
push eax
push 0
push 0
push 0x20
push 1
push 0
push 0
lea ecx, [ebp - 0x454]
call fcn.0041aad0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea ecx, [ebp - 0x454]
call fcn.0041a800
lea ecx, [ebp + 8]
call fcn.00401550
lea ecx, [ebp + 0x90]
call fcn.0041a800
mov esp, ebp
pop ebp
ret