Function at 0x39e52c34
Capabilities:
Create process on windows

Disassembly:
push 0x584
mov eax, 0x39ec79fe
call fcn.39eaecb8
mov esi, ecx
mov ecx, dword [esi + 0x37c]
mov dword [ebp - 0x53c], esi
call fcn.39e98597
push eax
lea ecx, [ebp - 0x498]
call fcn.39eb4742
xor ebx, ebx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x524]
call fcn.39e3c0a7
mov byte [ebp - 4], 1
push 0x39e162d8
lea ecx, [ebp - 0x460]
call fcn.39eb4742
mov byte [ebp - 4], 2
push 0x39e0a3c0
lea ecx, [ebp - 0x444]
call fcn.39eb4742
mov byte [ebp - 4], 3
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x444]
push eax
push esi
call fcn.39eb4742
neg al
sbb al, al
inc al
mov byte [ebp - 0x52d], al
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x444]
call fcn.39eb4742
mov byte [ebp - 4], 1
push ebx
push 1
lea ecx, [ebp - 0x460]
call fcn.39eb4742
cmp byte [ebp - 0x52d], bl
je 0x39e52d51
push ebx
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x52c], esp
push 0x39e1e750
call fcn.39eb4742
mov byte [ebp - 4], 4
add esi, 4
mov eax, dword [esi]
add eax, 4
mov byte [ebp - 4], 1
mov ecx, esi
call dword [eax]
push 0xd
pop esi
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp - 0x524]
call fcn.39eb4742
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x498]
call fcn.39eb4742
mov eax, esi
lea esp, [ebp - 0x5a0]
call fcn.39eaed4a
ret
xor eax, eax
push 0x208
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push ebx
push eax
call fcn.39e6fce0
add esp, 0xc
push 0x105
lea eax, [ebp - 0x21c]
push eax
push dword [0x39ee9fb8]
call fcn.39eb4742
lea eax, [ebp - 0x21c]
push eax
mov dword [ebp - 0x538], eax
call fcn.39eb4742
mov dword [ebp - 0x528], eax
cmp eax, ebx
je 0x39e52ddb
push eax
call dword [sym.imp.kernel32.dll_lstrlenA]
mov edi, eax
inc edi
cmp edi, 0x3fffffff
jle 0x39e52dbc
mov dword [ebp - 0x538], ebx
jmp 0x39e52ddb
lea eax, [edi + edi]
call fcn.39e741b0
mov eax, esp
push 3
push edi
push dword [ebp - 0x528]
push eax
call fcn.39eb4742
mov dword [ebp - 0x538], eax
lea eax, [ebp - 0x498]
push eax
mov edi, 0x39e19b50
lea eax, [ebp - 0x460]
push edi
push eax
call fcn.39e4ad04
mov byte [ebp - 4], 5
push 0x39e1e7ec
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.39e567c2
mov byte [ebp - 4], 6
push dword [ebp - 0x538]
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.39e567c2
mov byte [ebp - 4], 7
push edi
push eax
lea eax, [ebp - 0x4b4]
push eax
call fcn.39e567c2
add esp, 0x30
mov byte [ebp - 4], 9
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x508]
call fcn.39eb4742
mov byte [ebp - 4], 0xa
push ebx
push edi
lea ecx, [ebp - 0x444]
call fcn.39eb4742
mov byte [ebp - 4], 0xb
push ebx
push edi
lea ecx, [ebp - 0x460]
call fcn.39eb4742
cmp dword [ebp - 0x528], ebx
je 0x39e52e80
push dword [ebp - 0x528]
call fcn.39eb4742
pop ecx
cmp dword [ebp - 0x480], 8
mov eax, dword [ebp - 0x494]
jae 0x39e52e95
lea eax, [ebp - 0x494]
push ebx
push eax
call fcn.39eb4742
pop ecx
pop ecx
test eax, eax
jne 0x39e534dc
push 0x39e19b54
lea ecx, [ebp - 0x460]
call fcn.39eb4742
mov dword [ebp - 0x528], eax
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x444]
push 0x39e1e800
push eax
call fcn.39e4ad04
mov byte [ebp - 4], 0xd
push dword [ebp - 0x528]
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.39e56816
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x4b4]
push ecx
push eax
lea eax, [ebp - 0x47c]
push eax
call fcn.39e56816
add esp, 0x24
mov byte [ebp - 4], 0x10
push ebx
push edi
lea ecx, [ebp - 0x508]
call fcn.39eb4742
mov byte [ebp - 4], 0x11
push ebx
push edi
lea ecx, [ebp - 0x444]
call fcn.39eb4742
mov byte [ebp - 4], 0x12
push ebx
push edi
lea ecx, [ebp - 0x460]
call fcn.39eb4742
cmp dword [ebp - 0x464], 8
mov eax, dword [ebp - 0x478]
push ebx
jae 0x39e52f53
lea eax, [ebp - 0x478]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x528], esp
push eax
call fcn.39eb4742
mov byte [ebp - 4], 0x13
add esi, 4
mov eax, dword [esi]
mov dword [ebp - 0x52c], esi
add eax, 0xc
mov byte [ebp - 4], 0x12
mov ecx, esi
call dword [eax]
mov edi, dword [ebp - 0x4a0]
add edi, 0x104
xor ecx, ecx
push 2
pop edx
mov eax, edi
mul edx
seto cl
mov dword [ebp - 0x534], ebx
neg ecx
or ecx, eax
push ecx
call fcn.39eb4742
lea ecx, [edi + edi]
push ecx
push ebx
push eax
mov dword [ebp - 0x528], eax
call fcn.39e6fce0
mov eax, dword [ebp - 0x4b0]
add esp, 0x10
cmp dword [ebp - 0x49c], 8
jae 0x39e52fcf
lea eax, [ebp - 0x4b0]
push eax
push edi
push dword [ebp - 0x528]
call fcn.39eb4742
push 0x44
pop edi
push edi
lea eax, [ebp - 0x590]
push ebx
push eax
call fcn.39e6fce0
mov dword [ebp - 0x590], edi
xor eax, eax
lea edi, [ebp - 0x54c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0x18
cmp dword [ebp - 0x480], 8
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x494]
jae 0x39e53017
lea eax, [ebp - 0x494]
lea ecx, [ebp - 0x54c]
push ecx
lea ecx, [ebp - 0x590]
push ecx
push ebx
push ebx
push 0x10
xor edi, edi
inc edi
push edi
push ebx
push ebx
push dword [ebp - 0x528]
push eax
call dword [sym.imp.kernel32.dll_CreateProcessW]
push dword [ebp - 0x528]
test eax, eax
je 0x39e53458
call fcn.39eb4742
pop ecx
push 0x4ff
push 0x64
push ebx
lea eax, [ebp - 0x54c]
push eax
push edi
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov dword [ebp - 0x528], eax
cmp eax, edi
jne 0x39e530b4
push edi
push ebx
push ebx
push ebx
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x39e53050
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push edi
push ebx
push ebx
push ebx
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x39e53085
cmp dword [ebp - 0x528], ebx
je 0x39e530c5
cmp dword [ebp - 0x528], 0xffffffff
jne 0x39e53050
lea eax, [ebp - 0x534]
push eax
push dword [ebp - 0x54c]
call dword [sym.imp.kernel32.dll_GetExitCodeProcess]
test eax, eax
jne 0x39e530e2
mov dword [ebp - 0x534], ebx
push dword [ebp - 0x54c]
mov edi, dword [sym.imp.kernel32.dll_CloseHandle]
call edi
push dword [ebp - 0x548]
call edi
xor eax, eax
push 0x208
mov word [ebp - 0x428], ax
lea eax, [ebp - 0x426]
push ebx
push eax
call fcn.39e6fce0
push 0x39e1e850
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x4d0]
push eax
call fcn.39e567c2
mov edi, eax
mov byte [ebp - 4], 0x14
push 0xa
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x534]
call fcn.39eb4742
push eax
lea eax, [ebp - 0x444]
push edi
push eax
call fcn.39e567c2
add esp, 0x30
mov byte [ebp - 4], 0x15
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x47c]
call fcn.39eb4742
mov byte [ebp - 4], 0x14
push ebx
push 1
lea ecx, [ebp - 0x444]
call fcn.39eb4742
mov byte [ebp - 4], 0x12
push ebx
push 1
lea ecx, [ebp - 0x4d0]
call fcn.39eb4742
cmp dword [ebp - 0x464], 8
mov eax, dword [ebp - 0x478]
push ebx
jae 0x39e531a3
lea eax, [ebp - 0x478]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x528], esp
push eax
call fcn.39eb4742
mov byte [ebp - 4], 0x16
mov eax, dword [esi]
add eax, 0xc
mov byte [ebp - 4], 0x12
mov ecx, esi
call dword [eax]
lea eax, [ebp - 0x524]
push eax
push dword [ebp - 0x538]
lea eax, [ebp - 0x460]
push eax
call fcn.39e4ad04
add esp, 0xc
mov byte [ebp - 4], 0x17
mov ebx, dword [ebp - 0x53c]
lea eax, [ebx + 0x138]
push eax
lea ecx, [ebp - 0x4ec]
call fcn.39eb4742
mov byte [ebp - 4], 0x18
sub esp, 0x10
mov edi, esp
mov esi, 0x39ee7268
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
lea ebx, [ebp - 0x508]
movsd dword es:[edi], dword [esi]
call fcn.39e601f2
mov byte [ebp - 4], 0x19
push 0x39e1fca8
mov ecx, ebx
call fcn.39eb4742
test eax, eax
jne 0x39e5323f
push 0x39e1e888
lea ecx, [ebp - 0x4ec]
call fcn.39eb4742
xor ebx, ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x528], esp
push 0x39e1a018
call fcn.39eb4742
mov byte [ebp - 4], 0x1a
mov edi, dword [ebp - 0x52c]
mov eax, dword [edi]
add eax, 0xc
mov byte [ebp - 4], 0x19
mov ecx, edi
call dword [eax]
cmp dword [ebp - 0x448], 8
mov eax, dword [ebp - 0x45c]
push ebx
jae 0x39e53284
lea eax, [ebp - 0x45c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x52c], esp
push eax
call fcn.39eb4742
mov byte [ebp - 4], 0x1b
mov eax, dword [edi]
add eax, 0xc
mov byte [ebp - 4], 0x19
mov ecx, edi
call dword [eax]
cmp dword [ebp - 0x4d4], 8
mov eax, dword [ebp - 0x4e8]
push ebx
jae 0x39e532bc
lea eax, [ebp - 0x4e8]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x52c], esp
push eax
call fcn.39eb4742
mov byte [ebp - 4], 0x1c
mov eax, dword [edi]
add eax, 0xc
mov byte [ebp - 4], 0x19
mov ecx, edi
call dword [eax]
mov esi, dword [ebp - 0x53c]
call fcn.39e4dabc
cmp dword [ebp - 0x4d4], 8
mov ecx, dword [ebp - 0x4e8]
jae 0x39e532fe
lea ecx, [ebp - 0x4e8]
cmp dword [ebp - 0x448], 8
mov eax, dword [ebp - 0x45c]
jae 0x39e53313
lea eax, [ebp - 0x45c]
push ecx
push eax
push esi
call fcn.39e4db4b
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x52c], esp
push 0x39e1e8b0
mov dword [ebp - 0x534], eax
call fcn.39eb4742
mov byte [ebp - 4], 0x1d
mov eax, dword [edi]
add eax, 0xc
mov byte [ebp - 4], 0x19
mov ecx, edi
call dword [eax]
push 0xa
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x534]
call fcn.39eb4742
add esp, 0xc
push eax
lea ecx, [ebp - 0x444]
call fcn.39eb4742
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x4d0]
push 0x39e1e850
push eax
call fcn.39e4ad04
add esp, 0xc
mov byte [ebp - 4], 0x1f
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x47c]
call fcn.39eb4742
mov byte [ebp - 4], 0x1e
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x4d0]
call fcn.39eb4742
mov byte [ebp - 4], 0x19
push ebx
push esi
lea ecx, [ebp - 0x444]
call fcn.39eb4742
cmp dword [ebp - 0x464], 8
mov eax, dword [ebp - 0x478]
push ebx
jae 0x39e533d2
lea eax, [ebp - 0x478]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x52c], esp
push eax
call fcn.39eb4742
mov byte [ebp - 4], 0x20
mov eax, dword [edi]
add eax, 0xc
mov byte [ebp - 4], 0x19
mov ecx, edi
call dword [eax]
mov edi, dword [ebp - 0x534]
mov byte [ebp - 4], 0x18
push ebx
push esi
lea ecx, [ebp - 0x508]
call fcn.39eb4742
mov byte [ebp - 4], 0x17
push ebx
push esi
lea ecx, [ebp - 0x4ec]
call fcn.39eb4742
mov byte [ebp - 4], 0x12
push ebx
push esi
lea ecx, [ebp - 0x460]
call fcn.39eb4742
mov byte [ebp - 4], 0xb
push ebx
push esi
lea ecx, [ebp - 0x47c]
call fcn.39eb4742
mov byte [ebp - 4], 1
push ebx
push esi
lea ecx, [ebp - 0x4b4]
call fcn.39eb4742
mov esi, edi
xor ebx, ebx
jmp 0x39e52d20
call fcn.39eb4742
pop ecx
push ebx
push 2
push 0x39e1e920
lea ecx, [ebp - 0x4d0]
call fcn.39eb4742
mov byte [ebp - 4], 0x21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x52c], esp
push eax
lea eax, [ebp - 0x498]
push eax
push ecx
call fcn.39e56816
add esp, 0xc
mov byte [ebp - 4], 0x22
mov eax, dword [esi]
add eax, 4
mov byte [ebp - 4], 0x21
mov ecx, esi
call dword [eax]
mov byte [ebp - 4], 0x12
push ebx
push edi
lea ecx, [ebp - 0x4d0]
call fcn.39eb4742
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x47c]
push ebx
push edi
call fcn.39eb4742
mov byte [ebp - 4], 1
push ebx
push edi
lea ecx, [ebp - 0x4b4]
call fcn.39eb4742
push 2
jmp 0x39e52d1f
push esi
call fcn.39e67a5d
test al, al
je 0x39e53614
lea ecx, [ebp - 0x4d0]
call fcn.39e3c0a7
mov byte [ebp - 4], 0x23
push esi
lea ecx, [ebp - 0x444]
call fcn.39e67ac9
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x42c], 8
mov eax, dword [ebp - 0x440]
jae 0x39e5351e
lea eax, [ebp - 0x440]
push eax
push 0x39e1e970
call fcn.39e547e4
pop ecx
pop ecx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x52c], esp
push 0x39e1a018
call fcn.39eb4742
mov byte [ebp - 4], 0x25
lea edi, [esi + 4]
mov eax, dword [edi]
add eax, 0xc
mov byte [ebp - 4], 0x24
mov ecx, edi
call dword [eax]
cmp dword [esi + 0x150], 8
push ebx
jb 0x39e53567
mov eax, dword [esi + 0x13c]
jmp 0x39e5356d
lea eax, [esi + 0x13c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x52c], esp
push eax
call fcn.39eb4742
mov byte [ebp - 4], 0x26
mov eax, dword [edi]
add eax, 0xc
mov byte [ebp - 4], 0x24
mov ecx, edi
call dword [eax]
call fcn.39e4dabc
cmp dword [esi + 0x150], 8
jb 0x39e535a5
mov eax, dword [esi + 0x13c]
jmp 0x39e535ab
lea eax, [esi + 0x13c]
cmp dword [ebp - 0x42c], 8
mov ecx, dword [ebp - 0x440]
jae 0x39e535c0
lea ecx, [ebp - 0x440]
push eax
push ecx
push esi
call fcn.39e4db4b
mov edi, eax
push edi
push 0x39e1ea00
call fcn.39e547e4
pop ecx
pop ecx
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0x444]
call fcn.39eb4742
mov byte [ebp - 4], 0xb
push ebx
push 1
lea ecx, [ebp - 0x4d0]
call fcn.39eb4742
mov byte [ebp - 4], 1
push ebx
push 1
lea ecx, [ebp - 0x4b4]
call fcn.39eb4742
mov esi, edi
jmp 0x39e52d20
push ebx
push 2
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x4d0]
push 0x39e1eae8
push eax
call fcn.39e4ad04
mov byte [ebp - 4], 0x27
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x52c], esp
push 0x39e1ea90
push eax
push ecx
call fcn.39e567c2
add esp, 0xc
mov byte [ebp - 4], 0x28
add esi, 4
mov eax, dword [esi]
add eax, 4
mov byte [ebp - 4], 0x27
mov ecx, esi
call dword [eax]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x4d0]
jmp 0x39e534bd