Function at 0x413290
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55f458
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x290
push ebx
push esi
push edi
sub esp, 0x18
mov ecx, esp
push 0x1f
push str.UI_Started_nMain_process_ID:_t_d_n
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00424490
lea ecx, [ebp - 0x14]
call fcn.00437680
add esp, 0x18
mov dword [ebp - 4], 0
mov edx, dword [eax]
mov ecx, edx
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413307
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x8c]
call fcn.00424490
mov byte [ebp - 4], 2
or ebx, 0xffffffff
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x413344
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
sub esp, 0x18
mov ecx, esp
push 7
push str.product
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00424490
lea ecx, [ebp - 0x1c]
call fcn.00437680
add esp, 0x18
mov byte [ebp - 4], 3
mov edx, dword [eax]
mov ecx, edx
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413394
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.00424490
mov byte [ebp - 4], 5
mov eax, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4133cb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
sub esp, 0x18
mov ecx, esp
push 0x12
push str.ui_creation_failed
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00424490
lea ecx, [ebp - 0x14]
call fcn.00437680
add esp, 0x18
mov byte [ebp - 4], 6
mov edx, dword [eax]
mov ecx, edx
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413420
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x74]
call fcn.00424490
mov byte [ebp - 4], 8
mov eax, ebx
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x413457
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
sub esp, 0x18
mov ecx, esp
push 0x12
push str.creation_error_ws
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00424490
lea ecx, [ebp - 0x1c]
call fcn.00437680
add esp, 0x18
mov byte [ebp - 4], 9
mov edx, dword [eax]
mov ecx, edx
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4134a7
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x5c]
call fcn.00424490
mov edx, dword [ebp - 0x1c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4134da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xc
call fcn.00424e20
mov ecx, eax
test ecx, ecx
je 0x413a53
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0xd
call fcn.004516a0
cmp eax, 1
jne 0x413618
sub esp, 0x18
mov ecx, esp
push 0x14
push str.ui_termination_error
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00424490
lea ecx, [ebp - 0x14]
call fcn.00437680
add esp, 0x14
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x20], esp
mov edi, esp
sub esp, 0x18
mov ecx, esp
push 0x5a373c
call fcn.00424b70
mov ecx, edi
call fcn.00437900
add esp, 0x14
mov byte [ebp - 4], 0xf
mov edi, esp
mov dword [ebp - 0x28], esp
mov dword [ebp - 0x1c], edi
call fcn.00424e20
mov ecx, eax
test ecx, ecx
je 0x413a5d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
push 0x57ece0
mov ecx, edi
mov byte [ebp - 4], 0x10
call fcn.00425090
test al, al
jne 0x4135a3
push 0
push 0x57ece0
mov ecx, edi
call fcn.00425360
push ecx
mov byte [ebp - 4], 0x11
mov ebx, esp
mov dword [ebp - 0x1c], esp
push ecx
mov edi, esp
mov dword [ebp - 0x18], edi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00425550
add eax, 0x10
mov ecx, ebx
mov dword [edi], eax
call fcn.00437b50
sub esp, 0x18
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x44]
mov ecx, esp
push eax
call fcn.00424b70
mov ecx, edi
call fcn.00437900
mov byte [ebp - 4], 0xe
add esp, 0x18
call fcn.00447270
mov edx, dword [ebp - 0x14]
or ebx, 0xffffffff
add esp, 0x10
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41393f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41393f
push 0x104
lea eax, [ebp - 0x298]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jle 0x41364c
lea ecx, [ebp - 0x298]
cmp word [ecx + eax*2], 0x5c
lea ecx, [ecx + eax*2]
je 0x413647
dec eax
test eax, eax
jg 0x413630
jmp 0x41364c
xor eax, eax
mov word [ecx], ax
lea eax, [ebp - 0x298]
push eax
call fcn.00543bca
add esp, 4
test eax, eax
je 0x413745
sub esp, 0x18
mov ecx, esp
push 0x19
push str.directory_switching_error
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00424490
lea ecx, [ebp - 0x14]
call fcn.00437680
add esp, 0x14
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x20], esp
mov edi, esp
sub esp, 0x18
mov ecx, esp
push 0x5a373c
call fcn.00424b70
mov ecx, edi
call fcn.00437900
add esp, 0x14
mov byte [ebp - 4], 0x14
mov edi, esp
mov dword [ebp - 0x28], esp
mov dword [ebp - 0x1c], edi
call fcn.00424e20
mov ecx, eax
test ecx, ecx
je 0x413a67
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
push 0x57ece0
mov ecx, edi
mov byte [ebp - 4], 0x15
call fcn.00425090
test al, al
jne 0x4136fc
push 0
push 0x57ece0
mov ecx, edi
call fcn.00425360
push ecx
mov byte [ebp - 4], 0x16
mov ebx, esp
mov dword [ebp - 0x1c], esp
push ecx
mov edi, esp
mov dword [ebp - 0x18], edi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00425550
add eax, 0x10
mov ecx, ebx
mov dword [edi], eax
call fcn.00437b50
sub esp, 0x18
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x44]
mov ecx, esp
push eax
call fcn.00424b70
mov ecx, edi
call fcn.00437900
mov byte [ebp - 4], 0x13
jmp 0x4135e7
push 1
push 0
push str..ui.
push str.._nwjsNW_store
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
jb 0x41376e
mov byte [ebp - 0xd], 1
jmp 0x413943
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push ecx
push 0x400
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov esi, dword [ebp - 0x1c]
lea eax, [ebp - 0x5c]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00424b70
lea ecx, [ebp - 0x14]
call fcn.00437900
push esi
mov byte [ebp - 4], 0x18
push dword [eax]
lea eax, [ebp - 0x24]
push eax
call fcn.0041a6d0
mov byte [ebp - 4], 0xd
add esp, 0x24
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4137e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xd
lea ecx, [ebp - 0x24]
call fcn.00418a90
push 0xa
lea ecx, [ebp - 0x24]
call fcn.00418a90
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 1
call edi
call fcn.00424e20
mov ecx, eax
test ecx, ecx
je 0x413a71
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push 0x57ece0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
call fcn.00425090
test al, al
jne 0x41383c
push 0
push 0x57ece0
lea ecx, [ebp - 0x14]
call fcn.00425360
mov byte [ebp - 4], 0x1a
call fcn.00424e20
mov ecx, eax
test ecx, ecx
je 0x413a7b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x57ece0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1b
call fcn.00425090
test al, al
jne 0x41387e
push 0
push 0x57ece0
lea ecx, [ebp - 0x18]
call fcn.00425360
sub esp, 0x18
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x74]
mov ecx, esp
push eax
call fcn.00424b70
lea ecx, [ebp - 0x20]
call fcn.00437900
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1d
mov ecx, esp
push eax
call fcn.00424b70
lea ecx, [ebp - 0x28]
call fcn.00437900
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1e
push ecx
lea ecx, [ebp - 0x18]
mov edx, esi
push ecx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.004470d0
mov edx, dword [ebp - 0x28]
add esp, 0x24
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4138e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x413901
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x18]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41391b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x413935
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x7d0
call edi
mov esi, dword [ebp - 0x24]
mov byte [ebp - 0xd], 0
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x413958
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x48]
cmp ecx, 8
jb 0x413992
mov edx, dword [ebp - 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x413988
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413a85
push ecx
push edx
call fcn.00532241
add esp, 8
mov ecx, dword [ebp - 0x60]
cmp ecx, 8
jb 0x4139cc
mov edx, dword [ebp - 0x74]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4139c2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413a85
push ecx
push edx
call fcn.00532241
add esp, 8
mov ecx, dword [ebp - 0x30]
cmp ecx, 8
jb 0x413a06
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4139fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413a85
push ecx
push edx
call fcn.00532241
add esp, 8
mov ecx, dword [ebp - 0x78]
cmp ecx, 8
jb 0x413a3f
mov edx, dword [ebp - 0x8c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x413a35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413a85
push ecx
push edx
call fcn.00532241
add esp, 8
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0xd]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00425520
push 0x80004005
call fcn.00425520
push 0x80004005
call fcn.00425520
push 0x80004005
call fcn.00425520
push 0x80004005
call fcn.00425520
call fcn.005370ef
int3