Function at 0x407510
Capabilities:
Create process on windows
Set current directory

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x19594
call fcn.00431690
mov eax, dword [0x440480]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [0x442d90]
xor ebx, ebx
mov byte [ebp - 0x110], 0
mov byte [ebp - 0x19530], 0
mov byte [ebp - 0x19531], 0
test edi, edi
jle 0x4078c1
cmp byte [ebp - 0x19531], 0
jne 0x4075bf
mov esi, dword [0x442d94]
mov eax, dword [esi + ebx*4]
mov ecx, str._START
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x407586
test dl, dl
je 0x407582
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x407586
add eax, 2
add ecx, 2
test dl, dl
jne 0x407566
xor eax, eax
jmp 0x40758b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x407678
inc ebx
mov byte [ebp - 0x19531], 1
cmp ebx, edi
jge 0x407678
mov eax, dword [esi + ebx*4]
lea edx, [ebp - 0x110]
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4075b0
jmp 0x407678
lea eax, [ebp - 0x19530]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4075c8
sub eax, edx
mov esi, eax
mov eax, dword [0x442d94]
mov edx, dword [eax + ebx*4]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4075e0
sub eax, edi
lea ecx, [esi + eax + 2]
cmp ecx, 0x19000
jae 0x407681
lea edi, [ebp - 0x19530]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407600
mov ax, word [0x43c760]
mov word [edi], ax
mov eax, edx
mov ecx, edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x407615
lea edi, [ebp - 0x19530]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x407627
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x19530]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407644
mov cx, word [0x43c760]
mov word [edi], cx
lea edi, [ebp - 0x19530]
dec edi
lea ecx, [ecx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407660
mov dx, word [0x43cca0]
mov word [edi], dx
mov edi, dword [0x442d90]
inc ebx
cmp ebx, edi
jl 0x40754f
cmp byte [ebp - 0x19531], 0
je 0x4078c1
mov esi, 0x442ba8
mov eax, dword [esi]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.00422620
add esp, 8
test eax, eax
jne 0x4078c1
add esi, 4
cmp esi, 0x442c40
jl 0x407693
push eax
push eax
lea ecx, [ebp - 0x320]
push ecx
lea edx, [ebp - 0x530]
push edx
lea eax, [ebp - 0x110]
push eax
call fcn.00423103
add esp, 0x14
lea ecx, [ebp - 0x320]
push ecx
lea edx, [ebp - 0x530]
push edx
lea eax, [ebp - 0x428]
push str._s_s
push eax
call fcn.00420e97
add esp, 0x10
lea ecx, [ebp - 0x428]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push str.TEMP
call fcn.00420fe0
add esp, 4
mov edi, eax
call fcn.00401300
push 0x104
lea edx, [ebp - 0x218]
push edx
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x218]
lea eax, [ebp - 0x110]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x407760
test dl, dl
je 0x40775c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x407760
add eax, 2
add ecx, 2
test dl, dl
jne 0x407740
xor eax, eax
jmp 0x407765
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x407809
lea eax, [ebp - 0x110]
push esi
push eax
call fcn.00422620
add esp, 8
test eax, eax
jne 0x407809
cmp byte [0x443b44], al
jne 0x407799
call fcn.00401040
mov byte [0x443b44], 1
mov ecx, dword [0x443b7c]
mov eax, dword [ecx + 0x9c]
push eax
lea edx, [ebp - 0x110]
push edx
call fcn.00422620
add esp, 8
test eax, eax
jne 0x407809
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00422620
add esp, 8
test eax, eax
jne 0x407809
cmp byte [0x443b44], al
jne 0x4077e1
call fcn.00401040
mov byte [0x443b44], 1
mov eax, dword [0x443b7c]
lea ecx, [ebp - 0x110]
push ecx
mov ecx, dword [eax + 0x98]
lea edx, [ebp - 0x218]
push edx
push ecx
lea eax, [ebp - 0x110]
call fcn.00405000
add esp, 0xc
push esi
call fcn.00420f1b
lea eax, [ebp - 0x110]
add esp, 4
lea edx, [eax + 1]
jmp 0x407820
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407820
sub eax, edx
mov edx, eax
lea eax, [ebp - 0x19530]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407834
sub eax, esi
lea edx, [edx + eax + 8]
push edx
call fcn.0041fc44
add esp, 4
mov esi, eax
lea eax, [ebp - 0x19530]
push eax
lea ecx, [ebp - 0x110]
push ecx
push str.__s___s
push esi
call fcn.00420e97
push 0x44
lea edx, [ebp - 0x19590]
push 0
push edx
call fcn.00428f80
add esp, 0x1c
xor eax, eax
mov dword [ebp - 0x19544], eax
mov dword [ebp - 0x19540], eax
mov dword [ebp - 0x1953c], eax
mov dword [ebp - 0x19538], eax
lea eax, [ebp - 0x19544]
push eax
lea ecx, [ebp - 0x19590]
push ecx
push 0
push 0
push 0x100
push 0
push 0
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push esi
call fcn.00420f1b
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00420799
mov esp, ebp
pop ebp
ret