Function at 0x403e91
Capabilities:
Create process on windows
Terminate process

Disassembly:
push 0x84
mov eax, 0x407d5c
call fcn.0040721d
xor eax, eax
lea ecx, [ebp - 0x3c]
mov word [0x40d7d0], ax
mov word [0x40dbe4], ax
call fcn.00402743
and dword [ebp - 4], 0
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.00401b68
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 1
xor ecx, ecx
call fcn.00402929
lea ecx, [ebp - 0x24]
call fcn.00401cf8
or edi, 0xffffffff
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], edi
call fcn.00401cf8
mov esi, str.7z.exe
lea ecx, [ebp - 0x24]
push esi
call fcn.00402791
push 2
pop ebx
lea edx, [ebp - 0x24]
mov dword [ebp - 4], ebx
xor ecx, ecx
call fcn.00402929
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], edi
call fcn.00401cf8
push esi
lea ecx, [ebp - 0x24]
call fcn.00402791
xor edx, edx
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x24]
call fcn.00402b20
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], edi
call fcn.00401cf8
call fcn.00402bd9
lea ecx, [ebp - 0x3c]
test al, al
je 0x403fea
call fcn.00402743
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 4
push ecx
mov ecx, eax
call fcn.00401b68
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 5
mov ecx, ebx
call fcn.00402929
lea ecx, [ebp - 0x24]
call fcn.00401cf8
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], edi
call fcn.00401cf8
push str.FBNeo.zip
lea ecx, [ebp - 0x24]
call fcn.00402791
lea edx, [ebp - 0x24]
mov dword [ebp - 4], 6
mov ecx, ebx
call fcn.00402929
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], edi
call fcn.00401cf8
push ecx
mov ebx, 0x40dbe4
lea ecx, [ebp - 0x24]
push ebx
call fcn.00405283
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 7
call fcn.00402640
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], edi
call fcn.00401cf8
push str.https:__github.com_finalburnneo_FBNeo_releases_download_latest_Windows.x64.zip
lea ecx, [ebp - 0x24]
call fcn.00402791
mov dword [ebp - 4], 8
jmp 0x404088
call fcn.00402743
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 9
push ecx
mov ecx, eax
call fcn.00401b68
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 0xa
mov ecx, ebx
call fcn.00402929
lea ecx, [ebp - 0x24]
call fcn.00401cf8
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], edi
call fcn.00401cf8
push str.FBNeo.zip
lea ecx, [ebp - 0x24]
call fcn.00402791
lea edx, [ebp - 0x24]
mov dword [ebp - 4], 0xb
mov ecx, ebx
call fcn.00402929
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], edi
call fcn.00401cf8
push ecx
mov ebx, 0x40dbe4
lea ecx, [ebp - 0x24]
push ebx
call fcn.00405283
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xc
call fcn.00402640
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], edi
call fcn.00401cf8
push str.https:__github.com_finalburnneo_FBNeo_releases_download_latest_Windows.x32.zip
lea ecx, [ebp - 0x24]
call fcn.00402791
mov dword [ebp - 4], 0xd
push 2
pop edx
lea ecx, [ebp - 0x24]
call fcn.00402ba0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], edi
call fcn.00401cf8
push 0x3c
lea eax, [ebp - 0x90]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [ebp - 0x90]
mov eax, 0x418114
mov edi, eax
push 0xf
pop ecx
rep movsd dword es:[edi], dword [esi]
mov esi, 0x40d7d0
mov dword [0x418114], 0x3c
push eax
mov dword [0x418118], 0x40
mov dword [0x418130], 5
mov dword [0x418124], esi
mov dword [0x418128], 0x409f88
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov eax, dword [0x41814c]
test eax, eax
je 0x40410f
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
push esi
lea ecx, [ebp - 0x24]
call fcn.00405283
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xe
call fcn.00402640
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00401cf8
push ecx
push ebx
lea ecx, [ebp - 0x54]
call fcn.00405283
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0xf
call fcn.00402640
lea ecx, [ebp - 0x54]
call fcn.00401cf8
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3