Function at 0x4f3880
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x577d3f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x274
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x24], ecx
xor esi, esi
call fcn.004f37b0
test eax, eax
je 0x4f38c8
cmp esi, 0x3e8
jge 0x4f38c8
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
call fcn.004f37b0
test eax, eax
jne 0x4f38ae
call fcn.004f37b0
test eax, eax
je 0x4f38e6
push 0xffffffffffffffff
push 0x10
push 0xf357
call fcn.0053a982
xor eax, eax
jmp 0x4f3cfa
mov eax, dword [0x5d2d10]
mov dword [esp + 0x10], eax
mov ecx, dword [eax - 8]
mov dword [esp + 0x28c], 0
test ecx, ecx
je 0x4f3912
push eax
call fcn.0049e1f0
add esp, 4
test eax, eax
jne 0x4f3a10
lea eax, [esp + 0x14]
push 0xdf
push eax
call fcn.004ef2a0
mov esi, eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x294], 1
push ecx
call fcn.0049eba0
mov edx, dword [esi]
mov eax, dword [eax]
push edx
push eax
lea ecx, [esp + 0x24]
push str._s_s
push ecx
mov byte [esp + 0x2a8], 2
call fcn.00528823
add esp, 0x1c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x28c], 1
call fcn.00530b8f
lea ecx, [esp + 0x14]
mov byte [esp + 0x28c], 0
call fcn.00530b8f
mov edx, dword [esp + 0x10]
push edx
call fcn.0049e1f0
add esp, 4
test eax, eax
jne 0x4f3a10
lea eax, [esp + 0x14]
push 0xdf
push eax
call fcn.004ef2a0
mov esi, eax
lea ecx, [esp + 0x24]
mov bl, 3
push ecx
mov byte [esp + 0x298], bl
call fcn.0049eba0
mov edx, dword [esi]
mov eax, dword [eax]
push edx
push eax
lea ecx, [esp + 0x24]
push str._sTE_s
push ecx
mov byte [esp + 0x2a8], 4
call fcn.00528823
add esp, 0x1c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x28c], bl
call fcn.00530b8f
lea ecx, [esp + 0x14]
mov byte [esp + 0x28c], 0
call fcn.00530b8f
mov edx, dword [esp + 0x10]
push edx
call fcn.0049e1f0
add esp, 4
test eax, eax
jne 0x4f3a10
push 0x5d7b88
lea ecx, [esp + 0x14]
call fcn.00530d18
mov esi, dword [sym.imp.KERNEL32.dll_FormatMessageA]
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
mov bl, 6
mov ecx, 0x11
xor eax, eax
lea edi, [esp + 0x48]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov edi, 1
mov dword [esp + 0x3c], eax
mov dword [esp + 0x48], 0x44
mov dword [esp + 0x40], eax
mov dword [esp + 0x74], edi
mov word [esp + 0x78], di
mov eax, dword [ecx - 8]
test eax, eax
je 0x4f3ad9
lea edx, [esp + 0x34]
lea eax, [esp + 0x48]
push edx
push eax
push 0x5c
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
call fcn.00530904
lea eax, [esp + 0x40]
push eax
call fcn.0049f630
add esp, 0xc
mov ecx, eax
mov byte [esp + 0x294], 5
call fcn.0043eb60
push eax
push 0
push 0
push 0
push 0
push 0
push 0x5d7b88
lea ecx, [esp + 0x34]
call fcn.0043eb60
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x28c], 0
sete byte [esp + 0x1b]
call fcn.00530b8f
mov al, byte [esp + 0x1b]
test al, al
je 0x4f3c2a
push 0
lea ecx, [esp + 0x20]
push 0
push ecx
push 0x400
call ebp
push eax
push 0
push 0x1300
call esi
mov edx, dword [0x5d2d10]
mov dword [esp + 0x14], edx
lea eax, [esp + 0x2c]
push 0xe5
push eax
mov byte [esp + 0x294], bl
call fcn.004ef2a0
mov ecx, dword [esp + 0x24]
mov eax, dword [eax]
push ecx
lea edx, [esp + 0x20]
push eax
push edx
mov byte [esp + 0x2a0], 7
call fcn.00528823
add esp, 0x14
lea ecx, [esp + 0x2c]
mov byte [esp + 0x28c], bl
call fcn.00530b8f
mov eax, dword [esp + 0x14]
push 0
push 0x10
push eax
call fcn.0053a94a
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edx, [esp + 0x20]
push 0xc8
push edx
call fcn.004ef2a0
add esp, 8
mov eax, dword [eax]
push 0
push str.Executable_Files__.exe_.exe
push 0x1004
push eax
push 0x5c59a0
push edi
lea ecx, [esp + 0xa4]
mov byte [esp + 0x2a4], 8
call fcn.00528aaf
lea ecx, [esp + 0x20]
mov byte [esp + 0x28c], 0xa
call fcn.00530b8f
lea ecx, [esp + 0x8c]
call fcn.00528c11
cmp eax, edi
jne 0x4f3c84
lea eax, [esp + 0x28]
lea ecx, [esp + 0x8c]
push eax
call fcn.00528cec
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x290], 0xb
call fcn.00530cc8
lea ecx, [esp + 0x28]
mov byte [esp + 0x28c], 0xa
call fcn.00530b8f
lea ecx, [esp + 0x138]
mov byte [esp + 0x28c], 0xd
call fcn.00530b8f
lea ecx, [esp + 0x8c]
mov byte [esp + 0x28c], bl
call fcn.005327a5
lea ecx, [esp + 0x14]
mov byte [esp + 0x28c], 0
call fcn.00530b8f
jmp 0x4f3a1e
mov eax, dword [esp + 0x34]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x4f3c3b
push eax
call esi
mov eax, dword [esp + 0x38]
test eax, eax
je 0x4f3c46
push eax
call esi
mov ecx, dword [str._TE6ProCommunicationWindow_]
mov ebx, dword [esp + 0x24]
push ecx
mov ecx, ebx
xor esi, esi
call fcn.00499a60
test eax, eax
jne 0x4f3ce4
inc esi
cmp esi, 0x64
jge 0x4f3cbe
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [str._TE6ProCommunicationWindow_]
mov ecx, ebx
push edx
call fcn.00499a60
test eax, eax
je 0x4f3c62
jmp 0x4f3ce4
lea ecx, [esp + 0x138]
mov byte [esp + 0x28c], 0xc
call fcn.00530b8f
lea ecx, [esp + 0x8c]
mov byte [esp + 0x28c], bl
call fcn.005327a5
lea ecx, [esp + 0x14]
mov byte [esp + 0x28c], 0
call fcn.00530b8f
jmp 0x4f3ccc
push 0xffffffffffffffff
push 0x10
push 0x47e
call fcn.0053a982
lea ecx, [esp + 0x10]
mov dword [esp + 0x28c], 0xffffffff
call fcn.00530b8f
xor eax, eax
jmp 0x4f3cfa
lea ecx, [esp + 0x10]
mov dword [esp + 0x28c], 0xffffffff
call fcn.00530b8f
mov eax, edi
mov ecx, dword [esp + 0x284]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x280
ret