Function at 0x423610
Capabilities:
Create process on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x80
push ebx
push esi
xor ebx, ebx
push edi
push 0x44
lea eax, [ebp - 0x80]
push ebx
push eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
call fcn.00408720
xor eax, eax
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x2c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
mov dword [ebp - 0x10], ebx
push dword [eax + 0x24]
push dword [eax + 0x14]
call fcn.004207ce
mov edi, eax
cmp edi, ebx
jge 0x423680
mov eax, dword [esi + 8]
push dword [eax]
push 0x447f78
jmp 0x42397a
lea eax, [ebp - 4]
push eax
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x70]
mov eax, dword [eax]
push dword [eax + 0x18]
push dword [ebp - 0x1c]
call fcn.00430b92
mov edi, eax
cmp edi, ebx
jge 0x4236a7
push 0x447f56
jmp 0x4239cd
mov eax, dword [esi + 0xc]
dec eax
je 0x4236da
dec eax
je 0x4236cf
sub eax, 3
je 0x4236c4
mov edi, 0x8000ffff
push 0x447f1e
jmp 0x4239cd
mov eax, dword [esi + 8]
mov ebx, dword [eax + 0x90]
jmp 0x4236e3
mov eax, dword [esi + 8]
mov ebx, dword [eax + 0x8c]
jmp 0x4236e3
mov eax, dword [esi + 8]
mov ebx, dword [eax + 0x94]
test ebx, ebx
je 0x423761
cmp word [ebx], 0
je 0x423761
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push dword [ebp + 0xc]
call fcn.00414064
mov edi, eax
test edi, edi
jns 0x42370c
push 0x447efc
jmp 0x4239cd
push dword [ebp - 0x14]
lea eax, [ebp - 8]
push dword [ebp - 4]
push 0x447eea
push eax
call fcn.004302dc
mov edi, eax
add esp, 0x10
test edi, edi
js 0x42377c
push 0
lea eax, [ebp - 0x18]
push eax
push ebx
push dword [ebp + 0xc]
call fcn.004167fc
mov edi, eax
test edi, edi
jns 0x423748
push 0x447ebc
jmp 0x4239cd
push dword [ebp - 0x18]
lea eax, [ebp - 0xc]
push dword [ebp - 4]
push 0x447eea
push eax
call fcn.004302dc
add esp, 0x10
jmp 0x423796
push dword [ebp - 4]
mov ebx, 0x444fce
lea eax, [ebp - 8]
push ebx
push eax
call fcn.004302dc
mov edi, eax
add esp, 0xc
test edi, edi
jns 0x423786
push 0x447e96
jmp 0x4239cd
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push ebx
push eax
call fcn.004302dc
add esp, 0xc
mov edi, eax
test edi, edi
jns 0x4237a6
push 0x447e66
jmp 0x4239cd
mov eax, dword [esi + 0x10]
test eax, eax
je 0x42380c
mov ecx, dword [esi + 8]
cmp dword [ecx + 0xa0], 1
jne 0x42380c
push eax
push 0x402edc
push dword [ebp - 8]
mov ebx, 0x447e4c
lea eax, [ebp - 8]
push ebx
push eax
call fcn.004302dc
mov edi, eax
add esp, 0x14
test edi, edi
jns 0x4237e4
push 0x447e02
jmp 0x4239cd
push dword [esi + 0x10]
lea eax, [ebp - 0xc]
push 0x402edc
push dword [ebp - 0xc]
push ebx
push eax
call fcn.004302dc
mov edi, eax
add esp, 0x14
test edi, edi
jns 0x42380c
push 0x447dae
jmp 0x4239cd
push dword [ebp - 0xc]
push dword [ebp - 4]
push dword [esi + 0xc]
call fcn.0041bce6
push eax
mov eax, dword [esi + 8]
push dword [eax]
push dword [ebp + 0x10]
call fcn.0041c036
push eax
push 0x2000012d
push 1
call fcn.0040c33a
mov eax, dword [esi + 8]
mov eax, dword [eax + 0xa0]
add esp, 0x1c
push 2
pop ebx
cmp eax, 1
jne 0x423875
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.0042c338
mov edi, eax
test edi, edi
jns 0x42394e
push dword [ebp - 4]
push 0x447d7e
jmp 0x42397a
cmp eax, ebx
jne 0x4238a5
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.0042be0a
mov edi, eax
test edi, edi
jns 0x42394e
push dword [ebp - 4]
push 0x447d5c
jmp 0x42397a
lea eax, [ebp - 0x2c]
push eax
xor edi, edi
lea eax, [ebp - 0x80]
push eax
push edi
push edi
push 0x8000000
push edi
push edi
push edi
push dword [ebp - 8]
mov dword [ebp - 0x80], 0x44
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x42390b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
jle 0x4238e4
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
test edi, edi
js 0x4238ef
mov edi, 0x80004005
push edi
push 0x1f1
push 0x447930
call fcn.0043180e
push dword [ebp - 4]
push 0x447d36
jmp 0x42397a
xor edi, edi
push dword [ebp + 0x18]
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], 0x32
call dword [ebp + 0x14]
cmp eax, 1
je 0x42392f
cmp eax, edi
jne 0x423985
lea eax, [ebp - 0x10]
push eax
push 0x1f4
push dword [ebp - 0x2c]
call fcn.0042ec5e
mov edi, eax
cmp edi, 0x80070102
je 0x423909
test edi, edi
js 0x4239a9
mov edi, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x10]
mov eax, dword [esi + 8]
call fcn.004231ca
mov edi, eax
test edi, edi
jns 0x4239b3
push edi
push 0x206
push 0x447930
call fcn.0043180e
push dword [ebp - 0x10]
push 0x447d18
push edi
call fcn.004317fa
add esp, 0xc
jmp 0x4239e4
xor ecx, ecx
cmp eax, ebx
setne cl
lea edi, [ecx - 0x7ff8f9be]
push edi
push 0x1fb
push 0x447930
call fcn.0043180e
push 0x447ce2
jmp 0x4239cd
push dword [ebp - 4]
push 0x447cb2
jmp 0x42397a
mov eax, dword [esi + 0xc]
cmp eax, ebx
jne 0x4239d7
push dword [esi + 8]
call fcn.004283ce
mov edi, eax
test edi, edi
jns 0x4239e4
push 0x447c7c
push edi
call fcn.004317fa
pop ecx
pop ecx
jmp 0x4239e4
cmp eax, 1
jne 0x4239e4
push dword [esi + 8]
call fcn.004284b8
xor ebx, ebx
cmp dword [ebp - 0x14], ebx
je 0x4239f3
push dword [ebp - 0x14]
call fcn.0042ee18
cmp dword [ebp - 0x18], ebx
je 0x423a00
push dword [ebp - 0x18]
call fcn.0042ee18
cmp dword [ebp - 0x1c], ebx
je 0x423a0d
push dword [ebp - 0x1c]
call fcn.0042ee18
cmp dword [ebp - 4], ebx
je 0x423a1a
push dword [ebp - 4]
call fcn.0042ee18
cmp dword [ebp - 8], ebx
je 0x423a27
push dword [ebp - 8]
call fcn.0042ee18
cmp dword [ebp - 0xc], ebx
je 0x423a34
push dword [ebp - 0xc]
call fcn.0042ee18
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x28], ebx
je 0x423a47
push dword [ebp - 0x28]
call esi
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x2c], ebx
je 0x423a51
push dword [ebp - 0x2c]
call esi
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x18