Function at 0x438f66
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x536483
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x408
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x13c]
call fcn.00441430
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x40c]
mov ecx, dword [eax + 0x1c]
add ecx, 0xa08
mov dword [ebp - 0x120], ecx
mov ecx, dword [ebp - 0x120]
call fcn.00478dcc
mov dword [ebp - 0x140], eax
mov ecx, dword [ebp - 0x120]
call fcn.00478db3
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x140], 0
jne 0x439003
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x13c]
call fcn.00441450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00513ced
jmp 0x439837
mov dword [ebp - 0x248], 0
lea ecx, [ebp - 0x11c]
call fcn.004016b0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x140]
shl edx, 2
push edx
call fcn.005142b0
add esp, 4
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x114]
push ecx
mov ecx, dword [ebp - 0x120]
call fcn.00478e20
mov ecx, dword [ebp - 0x120]
call fcn.00478759
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
lea ecx, [ebp + 8]
call fcn.00409600
push eax
lea edx, [ebp - 0x244]
push edx
call fcn.004fa590
add esp, 8
lea eax, [ebp - 0x244]
push eax
mov ecx, dword [ebp - 0x40c]
call fcn.0043acd5
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x110], 0
mov ecx, dword [ebp - 0x40c]
cmp dword [ecx + 0x334], 0
je 0x4390dd
mov edx, dword [ebp - 0x40c]
cmp dword [edx + 0x33c], 0
jne 0x4390dd
mov dword [ebp - 0x110], 1
lea ecx, [ebp - 0x130]
call fcn.00514d96
mov byte [ebp - 4], 3
cmp dword [ebp - 0x118], 0xffffffff
jne 0x439155
push 0
push 0x9001
lea ecx, [ebp + 8]
call fcn.00409600
push eax
lea ecx, [ebp - 0x130]
call fcn.00514ea8
test eax, eax
jne 0x439155
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x130]
call fcn.00514deb
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11c]
call fcn.00513ced
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x13c]
call fcn.00441450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00513ced
jmp 0x439837
mov dword [ebp - 0x144], 0
jmp 0x439170
mov eax, dword [ebp - 0x144]
add eax, 1
mov dword [ebp - 0x144], eax
mov ecx, dword [ebp - 0x144]
cmp ecx, dword [ebp - 0x140]
jge 0x439427
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + edx*4]
push ecx
mov ecx, dword [ebp - 0x120]
call fcn.0047960b
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + edx*4]
push ecx
mov ecx, dword [ebp - 0x120]
call fcn.00478d94
mov dword [ebp - 0x248], eax
lea edx, [ebp - 0x10c]
push edx
mov ecx, dword [ebp - 0x248]
call fcn.004045b3
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x258], edx
mov eax, dword [ebp - 0x250]
push eax
mov ecx, dword [ebp - 0x258]
add ecx, 1
push ecx
push 0x55fb6c
lea edx, [ebp - 0x2a8]
push edx
call fcn.004fa9f4
add esp, 0x10
push 1
lea eax, [ebp - 0x2a8]
push eax
push 1
call fcn.004090a0
mov ecx, dword [eax + 0x1c]
add ecx, 0x1a8
call fcn.0051c532
lea ecx, [ebp - 0x10c]
push ecx
lea ecx, [ebp - 0x11c]
call fcn.00513e76
lea ecx, [ebp - 0x11c]
call fcn.00409600
push eax
call fcn.004090a0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0x410], edx
mov eax, dword [ebp - 0x410]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x410]
call dword [edx + 0x74]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x2ac], 0
call fcn.004090a0
mov dword [eax + 0x228], 1
mov eax, 1
test eax, eax
je 0x43930b
push 1
push 0
push 0
push 0
lea ecx, [ebp - 0x2c8]
push ecx
call dword [sym.imp.user32.dll_PeekMessageA]
test eax, eax
je 0x4392ec
cmp dword [ebp - 0x2c4], 0x100
jne 0x4392d0
cmp dword [ebp - 0x2c0], 0x1b
jne 0x4392d0
mov edx, dword [ebp - 0x40c]
mov dword [edx + 0x36c], 1
jmp 0x4392ea
lea eax, [ebp - 0x2c8]
push eax
call dword [sym.imp.user32.dll_TranslateMessage]
lea ecx, [ebp - 0x2c8]
push ecx
call dword [sym.imp.user32.dll_DispatchMessageA]
jmp 0x439290
cmp dword [ebp - 0x254], 0
je 0x439304
mov edx, dword [ebp - 0x40c]
cmp dword [edx + 0x228], 0
jne 0x439306
jmp 0x43930b
jmp 0x439287
cmp dword [ebp - 0x118], 0xffffffff
jne 0x43933e
mov eax, dword [ebp - 0x40c]
mov ecx, dword [eax + 0x310]
push ecx
lea edx, [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x40c]
mov ecx, dword [eax + 0x410]
call fcn.004504f1
jmp 0x4393f6
cmp dword [ebp - 0x118], 0xa
je 0x439350
cmp dword [ebp - 0x118], 0xb
jne 0x439372
push 0
mov ecx, dword [ebp - 0x110]
push ecx
mov edx, dword [ebp - 0x40c]
mov ecx, dword [edx + 0x410]
call fcn.0044cc16
mov dword [ebp - 0x24c], eax
jmp 0x43938d
push 0
push 0
mov eax, dword [ebp - 0x40c]
mov ecx, dword [eax + 0x410]
call fcn.0044cc16
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jne 0x4393af
push 1
mov ecx, dword [ebp - 0x40c]
mov ecx, dword [ecx + 0x410]
call fcn.00450681
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
je 0x4393f6
cmp dword [ebp - 0x134], 0
jne 0x4393db
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x134], edx
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x138], eax
jmp 0x4393f6
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x24c]
mov dword [ecx + 0x14], edx
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x140]
sub ecx, 1
cmp dword [ebp - 0x2ac], ecx
je 0x439422
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + edx*4]
push ecx
mov ecx, dword [ebp - 0x120]
call fcn.00478736
jmp 0x439161
cmp dword [ebp - 0x114], 0
je 0x43944b
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0x400], edx
mov eax, dword [ebp - 0x400]
push eax
call fcn.005142d9
add esp, 4
cmp dword [ebp - 0x138], 0
je 0x439670
cmp dword [ebp - 0x118], 0xffffffff
je 0x439630
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x3c8]
push edx
call fcn.004fa590
add esp, 8
lea eax, [ebp - 0x3c8]
push eax
call fcn.00425441
add esp, 4
lea ecx, [ebp - 0x3c8]
push ecx
call fcn.0050c73f
add esp, 4
push 0x55fb74
lea edx, [ebp - 0x3c8]
push edx
call fcn.004fa970
add esp, 8
test eax, eax
je 0x4394c9
push 0x55fb7c
lea eax, [ebp - 0x3c8]
push eax
call fcn.004fa970
add esp, 8
test eax, eax
jne 0x4394d8
lea ecx, [ebp - 0x244]
push ecx
call fcn.00427037
add esp, 4
mov dword [ebp - 0x3cc], 0
mov edx, dword [ebp - 0x118]
push edx
lea eax, [ebp - 0x244]
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call sub.exportfile.dll_ExportFile
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0
je 0x4395ed
lea ecx, [ebp - 0x3d0]
call fcn.004016b0
mov byte [ebp - 4], 4
lea edx, [ebp - 0x244]
push edx
push 0xa21c
lea eax, [ebp - 0x3d0]
push eax
call fcn.0051c44f
call fcn.004090a0
cmp dword [eax + 0x30c], 0
je 0x4395dc
lea ecx, [ebp - 0x244]
push ecx
lea ecx, [ebp - 0x3d8]
call fcn.00513d5b
mov byte [ebp - 4], 5
lea edx, [ebp - 0x3d8]
push edx
call fcn.00425889
add esp, 4
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x3dc]
call fcn.00513d5b
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3dc]
push ecx
call fcn.0042581d
add esp, 4
push 1
lea ecx, [ebp - 0x3d8]
call fcn.00409600
push eax
push 0
lea ecx, [ebp - 0x3dc]
call fcn.00409600
push eax
push 0
push 0
call dword [sym.imp.shell32.dll_ShellExecuteA]
mov dword [ebp - 0x3d4], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3dc]
call fcn.00513ced
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3d8]
call fcn.00513ced
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3d0]
call fcn.00513ced
jmp 0x439630
lea ecx, [ebp - 0x3e0]
call fcn.004016b0
mov byte [ebp - 4], 7
push 0xa21d
lea ecx, [ebp - 0x3e0]
call fcn.00514c73
push 0
push 0
lea ecx, [ebp - 0x3e0]
call fcn.00409600
push eax
call fcn.0051c1dd
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3e0]
call fcn.00513ced
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x408], edx
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
je 0x439666
push 1
mov ecx, dword [ebp - 0x404]
call fcn.004090b0
mov dword [ebp - 0x414], eax
jmp 0x439670
mov dword [ebp - 0x414], 0
cmp dword [ebp - 0x118], 0xffffffff
jne 0x4397fb
lea ecx, [ebp - 0x130]
call fcn.005150c3
lea ecx, [ebp - 0x3e4]
call fcn.004016b0
mov byte [ebp - 4], 8
lea ecx, [ebp + 8]
call fcn.00409600
push eax
push 0xa21c
lea ecx, [ebp - 0x3e4]
push ecx
call fcn.0051c44f
call fcn.004090a0
cmp dword [eax + 0x30c], 0
je 0x4397ec
lea edx, [ebp + 8]
push edx
lea ecx, [ebp - 0x3ec]
call fcn.00513a62
mov byte [ebp - 4], 9
lea eax, [ebp - 0x3ec]
push eax
call fcn.00425889
add esp, 4
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x3f0]
call fcn.00513a62
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x3f0]
push edx
call fcn.0042581d
add esp, 4
push 1
lea ecx, [ebp - 0x3ec]
call fcn.00409600
push eax
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00409600
push eax
push 0
push 0
call dword [sym.imp.shell32.dll_ShellExecuteA]
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0x20
jg 0x4397ce
lea ecx, [ebp - 0x3f8]
call fcn.004016b0
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x3f0]
push eax
push 0x55fb84
lea ecx, [ebp - 0x3f8]
push ecx
call fcn.0050ceb2
add esp, 0xc
lea ecx, [ebp - 0x3f4]
call fcn.004016b0
mov byte [ebp - 4], 0xc
push 0xa223
lea ecx, [ebp - 0x3f4]
call fcn.00514c73
lea edx, [ebp - 0x3f4]
push edx
lea ecx, [ebp - 0x3f8]
call fcn.00514091
push 0
push 0
lea ecx, [ebp - 0x3f8]
call fcn.00409600
push eax
call fcn.0051c1dd
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3f4]
call fcn.00513ced
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x3f8]
call fcn.00513ced
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3f0]
call fcn.00513ced
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3ec]
call fcn.00513ced
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3e4]
call fcn.00513ced
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x130]
call fcn.00514deb
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11c]
call fcn.00513ced
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x13c]
call fcn.00441450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00513ced
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4