Function at 0x403990
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45ff6d
mov eax, dword fs:[0]
push eax
sub esp, 0x7c
mov eax, dword [0x47bb04]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.0044595f
add esp, 8
test eax, eax
je 0x403a37
push 0
push 0
push 0x46474c
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x24]
call fcn.00403f50
mov dword [ebp - 0x4c], eax
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x50], edx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x50]
push eax
lea ecx, [ebp - 0x28]
push ecx
call fcn.00403d20
add esp, 0xc
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x58], edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x58]
call fcn.00402770
push eax
call fcn.004293db
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.004026d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004026d0
jmp 0x403c8c
call fcn.00403880
cmp eax, 1
jg 0x403ab0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00403f50
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x60]
push edx
push 0x464758
lea eax, [ebp - 0x30]
push eax
call fcn.00403dd0
add esp, 0xc
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x64]
call fcn.00402770
push eax
push 0x46475c
push 0x464768
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x30]
call fcn.004026d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.004026d0
jmp 0x403c8c
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 4
xor ecx, ecx
je 0x403b31
push 0
push 0
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x34]
call fcn.00403f50
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x6c]
push ecx
push 0x464770
lea edx, [ebp - 0x38]
push edx
call fcn.00403dd0
add esp, 0xc
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x70]
call fcn.00402770
push eax
push 0x464774
push 0x464780
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x38]
call fcn.004026d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.004026d0
jmp 0x403c8c
call fcn.00403830
movzx eax, al
test eax, eax
jne 0x403bac
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x3c]
call fcn.00403f50
mov dword [ebp - 0x74], eax
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x78], edx
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x78]
push eax
push 0x464788
lea ecx, [ebp - 0x40]
push ecx
call fcn.00403dd0
add esp, 0xc
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x7c]
call fcn.00402770
push eax
push 0x46478c
push 0x464798
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x40]
call fcn.004026d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.004026d0
jmp 0x403c8c
push 0x4647a0
push 0x4647c0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x18], eax
push 0x4647d0
push 0x4647f0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x18], 0
je 0x403c7e
cmp dword [ebp - 0x1c], 0
je 0x403c7e
lea edx, [ebp - 0x20]
push edx
call dword [ebp - 0x18]
test eax, eax
je 0x403c7c
push 0
push 0
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x44]
call fcn.00403f50
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x84]
push edx
push 0x464800
lea eax, [ebp - 0x48]
push eax
call fcn.00403dd0
add esp, 0xc
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x88]
call fcn.00402770
push eax
push 0x464804
push 0x464810
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x48]
call fcn.004026d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.004026d0
mov ecx, dword [ebp - 0x20]
push ecx
call dword [ebp - 0x1c]
jmp 0x403c8c
push 0
push 0
push 0x464818
call fcn.004293db
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret