Function at 0x409720
Capabilities:
Create process on windows

Disassembly:
enter 0x133c, 1
push ebx
push ecx
push edx
mov esi, dword [ebp + 0x18]
lea edi, [ebp - 0x108]
call fcn.00401940
mov esi, dword [ebp + 0x14]
lea edi, [ebp - 0x208]
call fcn.00401940
mov esi, dword [ebp + 0x10]
lea edi, [ebp - 0x308]
call fcn.00401940
mov esi, dword [ebp + 0xc]
lea edi, [ebp - 0x408]
call fcn.00401940
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x508]
call fcn.00401940
movzx eax, byte [ebp - 0x108]
cmp byte [ebp + eax - 0x108], 0
jne 0x409795
push 0xff
lea ebx, [ebp - 0x108]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.004045d0
movzx eax, byte [ebp - 0x108]
cmp byte [ebp + eax - 0x108], 0x5c
jne 0x4097bd
push 0xff
lea ebx, [ebp - 0x108]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.004045d0
movzx eax, byte [ebp - 0x108]
cmp byte [ebp + eax - 0x108], 0x5c
jne 0x4097e5
push 0xff
lea ebx, [ebp - 0x108]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.004045d0
lea edi, [ebp - 0x9e5]
lea esi, [ebp - 0x108]
call fcn.00401940
movzx eax, byte [ebp - 0x208]
cmp byte [ebp + eax - 0x208], 0
jne 0x40981e
push 0xff
lea ebx, [ebp - 0x208]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.004045d0
movzx eax, byte [ebp - 0x208]
cmp byte [ebp + eax - 0x208], 0x5c
jne 0x409846
push 0xff
lea ebx, [ebp - 0x208]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.004045d0
movzx eax, byte [ebp - 0x208]
cmp byte [ebp + eax - 0x208], 0x5c
jne 0x40986e
push 0xff
lea ebx, [ebp - 0x208]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.004045d0
lea eax, [ebp - 0x676]
push eax
lea esi, [ebp - 0x9e5]
lea edi, [ebp - 0x1040]
call fcn.00401b30
mov esi, 0x4127ec
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xf40]
call fcn.00401b30
lea esi, [ebp - 0x308]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xe40]
call fcn.00401b30
mov esi, 0x4127ee
call fcn.00401af0
mov ebx, edi
push ebx
call fcn.00401e60
lea ecx, [ebp - 0x676]
push ecx
call fcn.00401ee0
call fcn.00402760
test eax, eax
jne 0x409b79
lea edi, [ebp - 0xc3d]
mov esi, 0x4127f3
call fcn.00401940
lea edi, [ebp - 0xd3d]
mov esi, 0x4127f7
call fcn.00401940
lea eax, [ebp - 0x676]
push eax
push 0xff
lea ebx, [ebp - 0x8e5]
push ebx
call fcn.00404150
call fcn.00403ca0
cmp byte [ebp - 0x8e4], 0x2e
jne 0x409961
lea edi, [ebp - 0xc3d]
lea esi, [ebp - 0x8e5]
call fcn.00401940
lea eax, [ebp - 0x676]
push eax
push 0xff
mov ebx, esi
push ebx
call fcn.00404150
call fcn.00403ca0
lea edi, [ebp - 0xd3d]
lea esi, [ebp - 0x8e5]
call fcn.00401940
lea eax, [ebp - 0x7e4]
push eax
lea esi, [ebp - 0x208]
lea edi, [ebp - 0x1040]
call fcn.00401b30
mov esi, 0x4127f8
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xf40]
call fcn.00401b30
lea esi, [ebp - 0x308]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xe40]
call fcn.00401b30
lea esi, [ebp - 0xc3d]
call fcn.00401af0
mov ebx, edi
push ebx
call fcn.00401e60
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.00401210
call fcn.00402760
test eax, eax
jne 0x409b64
lea eax, [ebp - 0x676]
push eax
call fcn.00403d40
test al, al
jne 0x409b64
lea eax, [ebp - 0x676]
push eax
push 0xff
lea ebx, [ebp - 0x8e5]
push ebx
call fcn.00404150
call fcn.00403ca0
push 0x4127fa
lea eax, [ebp - 0x8e5]
push eax
call fcn.00403000
test eax, eax
jle 0x409a6e
push 0x4127fe
lea eax, [ebp - 0x8e5]
push eax
call fcn.00403000
mov byte [ebp - 0x7e5], al
push 0xff
lea ebx, [ebp - 0x8e5]
push ebx
movzx eax, byte [ebp - 0x7e5]
push eax
push 3
call fcn.004045d0
lea ecx, [ebp - 0x208]
push ecx
push 0xff
lea eax, [ebp - 0x8e5]
push eax
movzx ebx, byte [ebp - 0x7e5]
push ebx
call fcn.00405fe0
jmp 0x409a05
push 0x412802
lea eax, [ebp - 0x8e5]
push eax
call fcn.00403000
test eax, eax
jle 0x409ad7
push 0x412806
lea eax, [ebp - 0x8e5]
push eax
call fcn.00403000
mov byte [ebp - 0x7e5], al
push 0xff
lea ebx, [ebp - 0x8e5]
push ebx
movzx eax, byte [ebp - 0x7e5]
push eax
push 3
call fcn.004045d0
lea ecx, [ebp - 0x408]
push ecx
push 0xff
lea eax, [ebp - 0x8e5]
push eax
movzx ebx, byte [ebp - 0x7e5]
push ebx
call fcn.00405fe0
jmp 0x409a6e
push 0x41280a
lea eax, [ebp - 0x8e5]
push eax
call fcn.00403000
test eax, eax
jle 0x409b40
push 0x41280e
lea eax, [ebp - 0x8e5]
push eax
call fcn.00403000
mov byte [ebp - 0x7e5], al
push 0xff
lea ebx, [ebp - 0x8e5]
push ebx
movzx eax, byte [ebp - 0x7e5]
push eax
push 3
call fcn.004045d0
lea ecx, [ebp - 0x508]
push ecx
push 0xff
lea eax, [ebp - 0x8e5]
push eax
movzx ebx, byte [ebp - 0x7e5]
push ebx
call fcn.00405fe0
jmp 0x409ad7
call fcn.00409d20
lea eax, [ebp - 0x7e4]
push eax
lea ebx, [ebp - 0x8e5]
push ebx
push 0
call fcn.00402780
call fcn.00402f80
jmp 0x4099d4
lea eax, [ebp - 0x7e4]
push eax
call fcn.00401d90
call fcn.00402760
test eax, eax
je 0x409b79
lea eax, [ebp - 0x676]
push eax
call fcn.00401d90
call fcn.00402760
test eax, eax
je 0x409b8e
lea eax, [ebp - 0xb29]
push eax
push 0x44
call fcn.00404ac0
mov esi, 0x412812
lea edi, [ebp - 0x1340]
call fcn.00401b30
lea esi, [ebp - 0x208]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1240]
call fcn.00401b30
mov esi, 0x412820
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1140]
call fcn.00401b30
lea esi, [ebp - 0x308]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1040]
call fcn.00401b30
lea esi, [ebp - 0xc3d]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xf40]
call fcn.00401b30
mov esi, 0x412822
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xe40]
call fcn.00401b30
mov esi, 0x412824
call fcn.00401af0
lea edi, [ebp - 0xae5]
lea esi, [ebp - 0xe40]
call fcn.00401940
lea esi, [ebp - 0x9e5]
lea edi, [ebp - 0xe40]
call fcn.00401b30
mov esi, 0x412826
call fcn.00401af0
lea edi, [ebp - 0x9e5]
lea esi, [ebp - 0xe40]
call fcn.00401940
lea eax, [ebp - 0xb39]
push eax
lea ebx, [ebp - 0xb29]
push ebx
lea ecx, [ebp - 0x9e4]
push ecx
push 0
push 0x20
push 0
push 0
push 0
lea edx, [ebp - 0xae4]
push edx
push 0
call sub.kernel32.dll_CreateProcessA
test al, al
jne 0x409c9a
push 1
push 0
push 0
push 0
push 0x414728
call sub.user32.dll_PeekMessageA
test al, al
je 0x409cd1
push 0x414728
call sub.user32.dll_TranslateMessage
push 0x414728
call sub.user32.dll_DispatchMessageA
mov al, byte [0x41208d]
test al, al
je 0x409ccf
jmp 0x409cd1
jmp 0x409c9a
mov al, byte [0x41208d]
test al, al
je 0x409cdc
jmp 0x409d13
lea eax, [ebp - 0xb3d]
push eax
push dword [ebp - 0xb39]
call sub.kernel32.dll_GetExitCodeProcess
test al, al
jne 0x409cf2
mov al, byte [0x41208d]
test al, al
je 0x409cfd
jmp 0x409d13
push 0x12c
call sub.kernel32.dll_Sleep
cmp dword [ebp - 0xb3d], 0x103
je 0x409c9a
pop edx
pop ecx
pop ebx
leave
ret 0x14