Function at 0x41653c
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b9580
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x8a0
mov eax, dword [0x828208]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, edx
mov dword [ebp - 0x828], edi
mov eax, dword [ebx + 8]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebx + 0xc]
push 0x400
mov dword [ebp - 0x838], eax
lea eax, [ebp - 0x620]
push 0
push eax
mov dword [ebp - 0x830], edx
mov dword [ebp - 0x834], 0
call fcn.0048ff50
add esp, 0xc
lea eax, [ebp - 0x8b0]
push 0x44
push 0
push eax
call fcn.0048ff50
mov ecx, dword [ebp - 0x830]
add esp, 0xc
mov dword [ebp - 0x824], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x84c], xmm0
test ecx, ecx
je 0x416971
test esi, esi
je 0x416971
mov eax, dword [esi]
test eax, eax
je 0x416313
cmp byte [eax], 0
jne 0x41631e
mov eax, dword [esi + 0x50]
mov dword [esi + 0x38], eax
jmp 0x416971
movzx eax, byte [esi + 0x20]
cmp eax, 5
ja case.default.0x41632b
jmp dword [eax*4 + 0x416a68]
mov edx, dword [ecx + 0x58]
lea ecx, [ebp - 0x120]
call fcn.00408440
cmp byte [edi + 1], 0
je 0x416397
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x416358
lea eax, [ebp - 0x120]
jmp 0x4165a8
mov ecx, dword [esi + 0x10]
push eax
lea eax, [ebp - 0x120]
test ecx, ecx
jne 0x416385
push dword [esi + 8]
push dword [esi]
push eax
lea eax, [ebp - 0x620]
push str.__s_s___s__s
push eax
call fcn.00402130
add esp, 0x18
jmp case.default.0x41632b
cmp byte [ecx], 0
je 0x416366
push ecx
push eax
lea eax, [ebp - 0x120]
jmp 0x41657a
mov eax, dword [esi + 0x10]
test eax, eax
jne 0x4163a9
lea eax, [ebp - 0x120]
jmp 0x4165a8
cmp byte [eax], 0
jne 0x4163b9
lea eax, [ebp - 0x120]
jmp 0x4165a8
push eax
lea eax, [ebp - 0x120]
push eax
jmp 0x4165cc
xor edx, edx
lea ecx, [ebp - 0x120]
call fcn.00408440
lea eax, [ebp - 0x120]
push eax
push dword [esi + 0x10]
push dword [esi + 8]
push dword [esi]
push eax
push str.__s_s___s__s__s_
jmp 0x4165d7
mov edx, dword [ecx + 0x58]
lea ecx, [ebp - 0x120]
call fcn.00408440
push dword [esi + 0x18]
lea eax, [ebp - 0x120]
push dword [esi + 0x10]
push dword [esi + 8]
push dword [esi]
push eax
push str.__s_s___s__s__s
jmp 0x4165d7
mov eax, dword [0x8483c4]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x416454
movzx eax, word [ecx]
test ax, ax
je 0x416454
mov edx, eax
nop dword [eax]
movzx eax, dx
cmp eax, dword [0x84ae58]
je 0x41644b
movzx eax, word [ecx + 0x38]
add ecx, 0x38
mov edx, eax
test ax, ax
jne 0x416430
jmp 0x416454
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x824], eax
mov edx, dword [ebp - 0x830]
lea ecx, [ebp - 0x120]
mov edx, dword [edx + 0x58]
call fcn.00408440
cmp byte [edi + 1], 0
lea eax, [ebp - 0x120]
push dword [ebp - 0x824]
push eax
je 0x4165cc
push dword [esi + 0x18]
push dword [esi + 8]
push dword [esi]
push eax
lea eax, [ebp - 0x620]
push str.__s_s___s__s___s_s_
push eax
call fcn.00402130
add esp, 0x20
jmp case.default.0x41632b
mov ecx, dword [0x8483c4]
cmp dword [ecx], 1
jb 0x416532
mov ecx, dword [ecx + 0x20]
test ecx, ecx
je 0x4164e5
movzx eax, word [ecx]
test ax, ax
je 0x4164e5
mov edx, eax
movzx eax, dx
cmp eax, dword [0x84ae58]
je 0x4164dc
movzx eax, word [ecx + 0x40]
add ecx, 0x40
mov edx, eax
test ax, ax
jne 0x4164c1
jmp 0x4164e5
mov eax, dword [ecx + 0x38]
mov dword [ebp - 0x824], eax
mov edx, dword [ebp - 0x830]
lea ecx, [ebp - 0x120]
mov edx, dword [edx + 0x58]
call fcn.00408440
cmp byte [edi + 1], 0
lea eax, [ebp - 0x120]
push dword [ebp - 0x824]
push eax
je 0x4165cc
push dword [esi + 0x18]
push dword [esi + 8]
push dword [esi]
push eax
lea eax, [ebp - 0x620]
push str.__s_s___s__s___s_s_
push eax
call fcn.00402130
add esp, 0x20
jmp case.default.0x41632b
mov eax, 1
jmp 0x416977
xor edx, edx
lea ecx, [ebp - 0x220]
call fcn.00408440
cmp byte [edi + 1], 0
je 0x416596
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x41655d
mov eax, dword [esi + 0x10]
test eax, eax
jmp 0x4165a0
mov ecx, dword [esi + 0x10]
push eax
lea eax, [ebp - 0x220]
test ecx, ecx
je 0x416366
cmp byte [ecx], 0
je 0x416366
push ecx
push eax
push dword [esi + 8]
push dword [esi]
push eax
lea eax, [ebp - 0x620]
push str.__s_s___s___s_s___s
push eax
call fcn.00402130
add esp, 0x20
jmp case.default.0x41632b
mov eax, dword [esi + 0x10]
test eax, eax
je 0x4165a2
cmp byte [eax], 0
jne 0x4165c4
lea eax, [ebp - 0x220]
push dword [esi + 8]
push dword [esi]
push eax
lea eax, [ebp - 0x620]
push str.__s_s___s
push eax
call fcn.00402130
add esp, 0x14
jmp case.default.0x41632b
push eax
lea eax, [ebp - 0x220]
push eax
push dword [esi + 8]
push dword [esi]
push eax
push str.__s_s___s___s_s_
lea eax, [ebp - 0x620]
push eax
call fcn.00402130
add esp, 0x1c
lea eax, [ebp - 0x620]
push eax
push str.Executing:__s_n
push edi
call fcn.0040abf0
mov ecx, dword [esi + 0x30]
add esp, 0xc
xor eax, eax
xor edx, edx
mov dword [ebp - 0x82c], eax
mov eax, dword [esi + 0x2c]
push 0
mov dword [ebp - 0x824], eax
lea eax, [ebp - 0x820]
push 0x100
push eax
push 0
call fcn.00406e10
add esp, 0x10
cmp byte [esi + 0x22], 0
je 0x416638
cmp byte [edi], 0
jne 0x416638
mov dl, 1
jmp 0x41663a
xor dl, dl
push dword [ebp - 0x838]
lea ecx, [ebp - 0x820]
push dword [ebp - 0x83c]
call fcn.0040a2f0
mov edi, eax
add esp, 8
test edi, edi
je 0x41668e
push dword [ebp - 0x824]
mov eax, dword [edi + 4]
push 0
push 0
push 0
push edi
call eax
mov eax, dword [edi + 4]
add esp, 0x14
mov dword [ebp - 0x82c], 1
push dword [ebp - 0x824]
push 0
push 0
push 1
push edi
call eax
add esp, 0x14
mov dword [ebp - 4], 0
mov eax, dword [esi + 0xc4]
test eax, eax
je 0x4166bf
push eax
push str.Sleeping_for__d_ms_n
push dword [ebp - 0x828]
call fcn.0040adc0
add esp, 0xc
push dword [esi + 0xc4]
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [esi + 0x21], 0
mov dword [ebp - 0x8b0], 0x44
je 0x4166d6
mov eax, 1
jmp 0x4166d8
xor eax, eax
or dword [ebp - 0x884], 0x41
lea ecx, [ebp - 0x220]
xor edx, edx
mov word [ebp - 0x880], ax
call fcn.00408440
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0x8b0]
push eax
lea eax, [ebp - 0x220]
push eax
push 0
push 0x4000020
push 0
push 0
push 0
lea eax, [ebp - 0x620]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x416751
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.ERROR:_CreateProcess_FAILED___d__n
push dword [ebp - 0x828]
call fcn.0040abf0
add esp, 0xc
mov dword [ebp - 0x834], 8
jmp 0x41695e
mov ecx, 0x102
nop word [eax + eax]
cmp ecx, 0x102
jne 0x416952
xorps xmm0, xmm0
mov dword [ebp - 0x850], 0
movups xmmword [ebp - 0x868], xmm0
mov dword [ebp - 0x838], 0
movq qword [ebp - 0x858], xmm0
push 0x1e
push dword [ebp - 0x84c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x830], eax
cmp eax, 0x102
jne 0x4168b2
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x868]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x416803
nop word [eax + eax]
lea eax, [ebp - 0x868]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x868]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x868]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x4167d0
mov eax, dword [ebp - 0x838]
inc eax
mov dword [ebp - 0x838], eax
cmp eax, 0x64
jl 0x416792
cmp dword [ebp - 0x824], 0
mov ecx, dword [ebp - 0x830]
je 0x416760
test edi, edi
je 0x416866
push str.WAIT_TIMEOUT:_Updating_Progress_Bar_n
push dword [ebp - 0x828]
call fcn.0040adc0
push dword [ebp - 0x824]
mov eax, dword [edi + 4]
push 3
push 0
push 1
push edi
call eax
mov eax, dword [ebp - 0x82c]
add esp, 0x1c
add eax, 3
mov dword [ebp - 0x82c], eax
jmp 0x41686c
mov eax, dword [ebp - 0x82c]
mov ecx, dword [ebp - 0x830]
cmp eax, dword [ebp - 0x824]
jbe 0x416760
push eax
push str.WAIT_TIMEOUT:_Terminating_due_to_time_out___0x_x_n
push dword [ebp - 0x828]
call fcn.0040abf0
add esp, 0xc
push 1
push dword [ebp - 0x84c]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
or ecx, 0xffffffff
mov dword [ebp - 0x834], 8
jmp 0x416760
test eax, eax
jne 0x4169c3
mov ecx, dword [ebp - 0x828]
test edi, edi
je 0x416909
cmp byte [esi + 0x22], al
je 0x416909
cmp byte [ecx], al
jne 0x416909
nop dword [eax]
mov eax, dword [ebp - 0x82c]
mov ecx, dword [ebp - 0x824]
cmp eax, ecx
jae 0x416903
push ecx
push 2
add eax, 2
push 0
mov dword [ebp - 0x82c], eax
mov eax, dword [edi + 4]
push 1
push edi
call eax
add esp, 0x14
push 2
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4168d0
mov ecx, dword [ebp - 0x828]
push str.WAIT_OBJECT_0:_Getting_Exit_Code._n
push ecx
call fcn.0040adc0
add esp, 8
lea eax, [esi + 0x38]
push eax
push dword [ebp - 0x84c]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [esi + 0x38]
test eax, eax
je 0x416995
push str.GetExitCodeProcess_shows_Status_0x_x_n
push dword [ebp - 0x828]
call fcn.0040adc0
mov eax, dword [esi + 0xc0]
add esp, 0xc
test eax, eax
je 0x416952
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp - 0x84c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x416971
mov ecx, dword [edi]
push edi
call ecx
add esp, 4
mov eax, dword [ebp - 0x834]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0048980e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, dword [ebp - 0x828]
push str.GetExitCodeProcess_FAILED_Status_0x_x_n
push esi
call fcn.0040adc0
add esp, 0xc
mov dword [ebp - 0x834], 8
push str.ERROR:_GetExitCodeProcess_FAILED_n
push esi
call fcn.0040abf0
add esp, 8
jmp 0x416952
push eax
push str.Unhandled_WaitStatus__0x_x
push dword [ebp - 0x828]
call fcn.0040adc0
add esp, 0xc
mov edx, dword [ebp - 0x824]
mov ecx, dword [ebp - 0x828]
mov eax, dword [ebp - 0x82c]
nop dword [eax]
cmp eax, edx
jae 0x416a1e
add eax, 2
mov dword [ebp - 0x82c], eax
test edi, edi
je 0x4169f0
cmp byte [esi + 0x22], 0
je 0x4169f0
cmp byte [ecx], 0
jne 0x4169f0
mov eax, dword [edi + 4]
push edx
push 2
push 0
push 1
push edi
call eax
add esp, 0x14
jmp 0x4169d7
push dword [ebp - 0x830]
lea eax, [ebp - 0x820]
push eax
push str.FAILING_SILENTLY__oh_boy___execution_of____s___WaitStatus__0x_X_n
push ecx
call fcn.0040abf0
add esp, 0x10
push 1
push dword [ebp - 0x84c]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [ebp - 0x830]
mov dword [ebp - 0x834], 8
jmp 0x416760