Function at 0x5405e0
Capabilities:
Create process on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dd134
mov eax, dword fs:[0]
push eax
sub esp, 0x1a8
mov eax, dword [0x671330]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0x34]
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xe0], eax
xor eax, eax
mov dword [ebp - 0x160], edi
mov dword [ebp - 0x14c], eax
mov dword [ebp - 4], eax
mov byte [ebp - 0x145], al
mov byte [ebp - 4], 1
test edi, edi
je 0x54065d
cmp dword [edi + 0x14], 0x10
mov dword [edi + 0x10], eax
jb 0x540658
mov eax, dword [edi]
jmp 0x54065a
mov eax, edi
mov byte [eax], 0
xor eax, eax
mov dword [ebp - 0x30], 7
push 0xffffffffffffffff
push eax
push ecx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov word [ebp - 0x44], ax
call fcn.0040ab20
cmp dword [esi + 0x10], 0
mov byte [ebp - 4], 2
je 0x5406a3
push 1
push 0x5f8954
lea ecx, [ebp - 0x44]
call fcn.00416320
push 0xffffffffffffffff
push 0
push esi
lea ecx, [ebp - 0x44]
call fcn.0040a160
cmp dword [ebp - 0x30], 8
lea ecx, [ebp - 0x44]
mov eax, dword [ebp - 0x34]
xorps xmm0, xmm0
cmovae ecx, dword [ebp - 0x44]
mov byte [ebp - 0x144], 0
push dword [ebp - 0x144]
movq qword [ebp - 0x2c], xmm0
lea eax, [ecx + eax*2]
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], 0
cmovae ecx, dword [ebp - 0x44]
push eax
push ecx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
call fcn.0040ed40
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x144], 0
call fcn.00543b60
push 0
push dword [ebp - 0x154]
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xe8], 0
push eax
call sub.USERENV.dll_CreateEnvironmentBlock
test eax, eax
je 0x540e1b
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
xor eax, eax
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x18], eax
push 0x40
push eax
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 4
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [ebp + 0x28]
add esp, 0xc
mov dword [ebp - 0x13c], 0x44
test esi, esi
je 0x5407e6
cmp dword [ebp + 0x2c], 8
lea eax, [ebp + 0x18]
mov byte [ebp - 0x144], 0
lea ecx, [ebp - 0x20]
cmovae eax, dword [ebp + 0x18]
push dword [ebp - 0x144]
mov dword [ebp - 0x1c], 0
lea eax, [eax + esi*2]
lea esi, [ebp + 0x18]
cmovae esi, dword [ebp + 0x18]
push eax
push esi
call fcn.0053f690
lea eax, [ebp - 0x144]
mov dword [ebp - 0x144], 0
push eax
lea ecx, [ebp - 0x20]
call fcn.00543b60
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x144], eax
xor eax, eax
mov dword [ebp - 0x110], 1
xorps xmm0, xmm0
mov word [ebp - 0x10c], ax
movups xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0x1b0], 0x1388
mov dword [ebp - 0x1ac], 0xfa0
mov dword [ebp - 0x1a8], 0xbb8
mov dword [ebp - 0x1a4], 0x7d0
mov dword [ebp - 0x1a0], 0x3e8
mov dword [ebp - 0x19c], 0x1f4
mov dword [ebp - 0x198], 0x12c
mov dword [ebp - 0x194], 0xc8
mov byte [ebp - 0x13d], 7
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x13c]
push eax
push 0
push dword [ebp - 0xe8]
push 0x4000420
push 0
push 0
push 0
push dword [ebp - 0x2c]
push 0
push dword [ebp - 0x154]
call dword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
jne 0x540d88
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
lea eax, [ebp - 0xdc]
push 0x98
push 0
push eax
mov dword [ebp - 0x15c], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0xdc], 0x608d28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
or dword [ebp - 0x14c], 1
lea eax, [ebp - 0xd8]
push 0
push 0
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 5
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 4], 6
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xdc], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0xe0], eax
lea eax, [ebp - 0xd8]
mov ecx, eax
mov dword [ebp - 0x158], eax
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [ebp - 0xd8], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 4
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 8
push str.CreateProcessAsUser_failed__0x
push eax
call fcn.00414ff0
add esp, 8
mov ecx, eax
push 0x416260
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
push esi
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push str._._Retrying_in
push eax
call fcn.00414ff0
add esp, 8
mov ecx, eax
push 0x4e4d80
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
movzx ecx, byte [ebp - 0x13d]
mov ecx, dword [ebp + ecx*4 - 0x1b0]
mov dword [ebp - 0x158], ecx
push ecx
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int_]
push str._ms.
push eax
call fcn.00414ff0
add esp, 8
mov ecx, eax
push 0x41a100
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0xdc]
call fcn.00414da0
cmp dword [eax + 0x14], 0x10
jb 0x5409f1
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebp - 0x17c]
cmp eax, 0x10
jb 0x540a15
inc eax
push 1
push eax
push dword [ebp - 0x190]
call fcn.0040b970
add esp, 0xc
test edi, edi
je 0x540a8a
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0xdc]
call fcn.00414da0
mov esi, eax
cmp edi, esi
je 0x540a6d
cmp dword [edi + 0x14], 0x10
jb 0x540a48
mov eax, dword [edi + 0x14]
inc eax
push 1
push eax
push dword [edi]
call fcn.0040b970
add esp, 0xc
mov dword [edi + 0x14], 0xf
cmp dword [edi + 0x14], 0x10
mov dword [edi + 0x10], 0
jb 0x540a60
mov eax, dword [edi]
jmp 0x540a62
mov eax, edi
push esi
mov ecx, edi
mov byte [eax], 0
call fcn.00416760
mov eax, dword [ebp - 0x17c]
cmp eax, 0x10
jb 0x540a8a
inc eax
push 1
push eax
push dword [ebp - 0x190]
call fcn.0040b970
add esp, 0xc
push 0x44
lea eax, [ebp - 0x13c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [ebp - 0x158]
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x13c], 0x44
xorps xmm0, xmm0
mov dword [ebp - 0x110], 1
mov word [ebp - 0x10c], ax
push esi
movups xmmword [ebp - 0xf8], xmm0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dl, byte [ebp - 0x13d]
add dword [ebp - 0x150], esi
test dl, dl
lea eax, [edx - 1]
movzx ecx, al
movzx eax, dl
cmove ecx, eax
mov eax, dword [ebp - 0xdc]
mov byte [ebp - 0x13d], cl
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xdc], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0xe0], eax
test byte [ebp - 0x9c], 1
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xd8], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
je 0x540bb5
lea ecx, [ebp - 0xd8]
call dword [sym.imp.MSVCP140.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const]
lea ecx, [ebp - 0xd8]
test eax, eax
je 0x540b51
call dword [sym.imp.MSVCP140.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const]
jmp 0x540b57
call dword [sym.imp.MSVCP140.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const]
lea ecx, [ebp - 0xd8]
mov esi, eax
call dword [sym.imp.MSVCP140.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const]
lea ecx, [ebp - 0xd8]
sub esi, eax
call dword [sym.imp.MSVCP140.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const]
cmp esi, 0x1000
jb 0x540bac
test al, 0x1f
je 0x540b85
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov ecx, dword [eax - 4]
cmp ecx, eax
jb 0x540b92
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
sub eax, ecx
cmp eax, 4
jae 0x540b9f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
cmp eax, 0x23
jbe 0x540baa
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, ecx
push eax
call fcn.00543f4c
add esp, 4
push 0
push 0
push 0
lea ecx, [ebp - 0xd8]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
push 0
push 0
lea ecx, [ebp - 0xd8]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setp_char___char__]
and dword [ebp - 0x9c], 0xfffffffe
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xa0], 0
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp + 0x14]
jb 0x540860
push 0x98
lea eax, [ebp - 0xdc]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0xdc], 0x608d28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
mov eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0xdc]
or eax, 2
mov byte [ebp - 4], 0xb
push 0
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0xd8]
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 4], 0xc
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xdc], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0xe0], eax
lea eax, [ebp - 0xd8]
mov ecx, eax
mov dword [ebp - 0xe0], eax
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [ebp - 0xd8], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 4
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0xe
push str.CreateProcessAsUser_failed__0x
push eax
call fcn.00414ff0
add esp, 8
mov ecx, eax
push 0x416260
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
push dword [ebp - 0x15c]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x6090bc
push eax
call fcn.00414ff0
add esp, 8
lea eax, [ebp - 0x190]
lea ecx, [ebp - 0xdc]
push eax
call fcn.00414da0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xf
jb 0x540d34
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
xorps xmm0, xmm0
lea eax, [ebp - 0x168]
mov dword [ebp - method.std::exception.virtual_0], vtable.std::exception.0
push eax
lea eax, [ebp - 0xe4]
movq qword [ebp - 0x168], xmm0
push eax
mov byte [ebp - 0xe0], 1
call dword [sym.imp.VCRUNTIME140.dll___std_exception_copy]
add esp, 8
mov dword [ebp - method.std::bad_alloc.virtual_0], vtable.std::runtime_error.0
lea eax, [ebp - 0x16c]
push 0x638088
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov ecx, dword [ebp - 0xe0]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test ecx, ecx
je 0x540da2
mov eax, dword [ebp - 0xf8]
mov dword [ecx], eax
jmp 0x540daa
push dword [ebp - 0xf8]
call esi
push dword [ebp - 0xf4]
call esi
push dword [ebp - 0xe8]
mov byte [ebp - 0x13d], 1
call sub.USERENV.dll_DestroyEnvironmentBlock
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x540de1
mov eax, dword [ebp - 0x144]
sub eax, ecx
push 2
sar eax, 1
push eax
push ecx
call fcn.0040b970
add esp, 0xc
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x540dfb
mov eax, dword [ebp - 0x24]
sub eax, ecx
push 2
sar eax, 1
push eax
push ecx
call fcn.0040b970
add esp, 0xc
mov eax, dword [ebp - 0x30]
cmp eax, 8
jb 0x540fc5
push 2
inc eax
push eax
push dword [ebp - 0x44]
call fcn.0040b970
add esp, 0xc
jmp 0x540fc5
push 0x98
lea eax, [ebp - 0xdc]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0xdc], 0x608d28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
push 0
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x14c], 4
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 4], 0x11
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xdc], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0xe0], eax
lea eax, [ebp - 0xd8]
mov ecx, eax
mov dword [ebp - 0xe0], eax
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [ebp - 0xd8], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 4
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x13
push str.CreateEnvironmentBlock_failed__0x
push eax
call fcn.00414ff0
add esp, 8
mov ecx, eax
push 0x416260
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x6090bc
push eax
call fcn.00414ff0
add esp, 8
lea eax, [ebp - 0x190]
lea ecx, [ebp - 0xdc]
push eax
call fcn.00414da0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x14
jb 0x540f2e
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
xorps xmm0, xmm0
lea eax, [ebp - 0x174]
mov dword [ebp - method.std::exception.virtual_0], vtable.std::exception.0
push eax
lea eax, [ebp - 0xe4]
movq qword [ebp - 0x174], xmm0
push eax
mov byte [ebp - 0xe0], 1
call dword [sym.imp.VCRUNTIME140.dll___std_exception_copy]
add esp, 8
mov dword [ebp - method.std::bad_alloc.virtual_0], vtable.std::runtime_error.0
lea eax, [ebp - 0x178]
push 0x638088
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov esi, dword [ebp - 0x1b4]
mov ecx, esi
mov eax, dword [esi]
mov eax, dword [eax + 4]
call eax
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edi, dword [ebp - 0x160]
test edi, edi
je 0x540fb3
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 4]
call eax
push eax
mov ecx, edi
call fcn.00416e10
mov eax, 0x540fb9
ret
mov ecx, dword [ebp + 0x2c]
cmp ecx, 8
jb 0x540fdc
push 2
inc ecx
push ecx
push dword [ebp + 0x18]
call fcn.0040b970
add esp, 0xc
mov al, byte [ebp - 0x13d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00544286
mov esp, ebp
pop ebp
ret