Function at 0x1007c8bf
Capabilities:
Create process on windows

Disassembly:
push 0x324
mov eax, 0x100f49dc
call fcn.100cca34
mov dword [ebp - 0x2d4], ecx
mov eax, dword [ebp + 8]
xor ebx, ebx
mov edi, dword [ebp + 0xc]
push 0x44
mov dword [ebp - 0x2d8], eax
pop eax
push 0x40
mov dword [ebp - 0x330], eax
pop eax
push eax
lea eax, [ebp - 0x32c]
mov dword [ebp - 0x2d0], edi
push ebx
push eax
call fcn.100cea50
add esp, 0xc
push 0x2f
pop ecx
push 0x32
mov word [ebp - 0x224], cx
pop eax
mov word [ebp - 0x222], ax
push 0x79
pop eax
mov word [ebp - 0x220], ax
add eax, 7
mov word [ebp - 0x21e], ax
xor eax, eax
mov word [ebp - 0x21c], cx
lea ecx, [ebp - 0x224]
mov word [ebp - 0x21a], ax
mov ax, word [ebp - 0x224]
mov esi, dword [0x101ef2d0]
push edi
call fcn.1007db6e
push eax
lea eax, [ebp - 0x218]
push 0x208
push eax
call dword [esi + 0x5d0]
add esp, 0x10
mov dword [ebp - 0x2cc], ebx
mov dword [ebp - 4], ebx
mov eax, dword [0x10201ab4]
push 0x3d
pop esi
push 0x4c
mov edi, dword [eax + 0xa8]
mov eax, 0x86
mov word [ebp - 0x274], ax
pop edx
push 0x51
pop eax
mov word [ebp - 0x272], si
mov word [ebp - 0x270], si
push 0x44
mov word [ebp - 0x26e], dx
mov word [ebp - 0x26c], ax
mov word [ebp - 0x26a], ax
pop eax
mov word [ebp - 0x268], ax
push 0x3e
mov word [ebp - 0x266], ax
pop eax
push 0x38
mov word [ebp - 0x264], ax
pop eax
push 0x3c
mov word [ebp - 0x262], ax
pop eax
push 0x3b
pop ecx
mov word [ebp - 0x260], ax
push 0x4f
pop eax
mov word [ebp - 0x25e], cx
mov word [ebp - 0x25c], ax
push 0x38
mov word [ebp - 0x25a], si
pop eax
mov word [ebp - 0x258], ax
push 0x3f
pop eax
mov word [ebp - 0x256], ax
push 0x6d
mov word [ebp - 0x254], cx
pop eax
mov word [ebp - 0x252], cx
mov word [ebp - 0x250], ax
push 0x38
pop eax
mov word [ebp - 0x24e], ax
push 0x3c
pop ecx
mov word [ebp - 0x24c], dx
mov word [ebp - 0x24a], cx
push 0x4d
mov word [ebp - 0x248], si
pop esi
mov word [ebp - 0x246], si
mov word [ebp - 0x244], ax
push 0x40
pop eax
mov word [ebp - 0x242], ax
push 0x4e
pop edx
push 0x44
pop eax
push 0x41
pop ecx
mov word [ebp - 0x240], dx
mov word [ebp - 0x23e], ax
mov word [ebp - 0x23c], cx
push 0x3d
pop eax
mov word [ebp - 0x23a], ax
push 0x4c
pop eax
mov word [ebp - 0x238], ax
push 0x43
pop eax
mov word [ebp - 0x236], ax
push 0x51
pop eax
mov word [ebp - 0x234], ax
mov word [ebp - 0x232], cx
lea ecx, [ebp - 0x274]
mov word [ebp - 0x230], dx
mov word [ebp - 0x22e], si
push 0x3c
pop eax
mov word [ebp - 0x22c], ax
add eax, 0x4c
mov word [ebp - 0x22a], ax
xor eax, eax
mov word [ebp - 0x228], ax
mov ax, word [ebp - 0x274]
mov esi, dword [edi]
call fcn.10039c42
push eax
push edi
call dword [esi + 0x110]
test eax, eax
je 0x1007cb31
push 1
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x2dc], eax
mov byte [ebp - 4], 1
test eax, eax
je 0x1007cb24
mov ecx, eax
call fcn.1007bfd8
mov esi, eax
jmp 0x1007cb26
mov esi, ebx
mov byte [ebp - 4], bl
mov dword [ebp - 0x2cc], esi
jmp 0x1007cb37
mov esi, dword [ebp - 0x2cc]
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x330]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x218]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1007cd1e
mov eax, dword [0x10201ab4]
push 0x6f
pop esi
push 0x78
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
mov eax, 0x84
mov word [ebp - 0x2c8], ax
pop eax
push 0x75
mov word [ebp - 0x2c6], si
mov word [ebp - 0x2c4], ax
pop eax
mov word [ebp - 0x2c2], ax
push 0x7b
pop eax
mov word [ebp - 0x2c0], ax
push 0x46
pop eax
mov word [ebp - 0x2be], ax
mov word [ebp - 0x2bc], ax
push 0x2c
pop eax
mov word [ebp - 0x2ba], ax
push 0x31
pop ecx
push 0x7f
pop edx
mov word [ebp - 0x2b8], cx
mov word [ebp - 0x2b6], dx
mov word [ebp - 0x2b4], ax
push 0x7c
pop eax
mov word [ebp - 0x2b2], ax
push 0x7e
pop ecx
push 0x7b
pop eax
mov word [ebp - 0x2b0], cx
mov word [ebp - 0x2ae], ax
push 0x71
pop eax
mov word [ebp - 0x2ac], si
mov word [ebp - 0x2aa], ax
mov word [ebp - 0x2a8], dx
push 0x2c
mov word [ebp - 0x2a6], dx
pop edx
mov word [ebp - 0x2a4], dx
push 0x6d
mov word [ebp - 0x2a2], si
pop esi
mov word [ebp - 0x2a0], cx
mov word [ebp - 0x29e], ax
add eax, 0xf
push 0x75
pop ecx
mov word [ebp - 0x29c], si
mov word [ebp - 0x29a], ax
push 0x7b
pop eax
mov word [ebp - 0x298], cx
mov word [ebp - 0x296], ax
push 0x7a
pop eax
mov word [ebp - 0x294], ax
push 0x72
pop eax
mov word [ebp - 0x292], dx
mov word [ebp - 0x290], ax
push 0x78
pop eax
mov word [ebp - 0x28e], si
mov word [ebp - 0x28c], cx
mov word [ebp - 0x28a], ax
push 0x38
pop eax
mov word [ebp - 0x288], ax
push 0x53
mov word [ebp - 0x286], dx
pop eax
mov word [ebp - 0x284], ax
push 0x51
pop eax
mov word [ebp - 0x282], ax
push 0x49
pop eax
mov word [ebp - 0x280], ax
push 0x31
pop eax
mov word [ebp - 0x27e], ax
push 0x3c
pop eax
mov word [ebp - 0x27c], ax
push 0x44
pop eax
mov word [ebp - 0x27a], ax
add eax, 0x40
mov word [ebp - 0x278], ax
xor eax, eax
mov word [ebp - 0x276], ax
mov ax, word [ebp - 0x2c8]
mov esi, dword [edi]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x2c8]
call fcn.1007db3c
push eax
push edi
call dword [esi + 0x18]
mov esi, dword [ebp - 0x2cc]
add esp, 0x10
jmp 0x1007cd87
mov edi, dword [ebp - 0x2d4]
mov edx, dword [ebp - 0x2d8]
mov eax, dword [ebp - 0x2e4]
mov dword [edi], eax
test edx, edx
je 0x1007cd43
mov ecx, dword [edx + 8]
test ecx, ecx
je 0x1007cd43
push eax
push dword [edx + 0x1c]
call ecx
push 0x10
call fcn.100ccadc
pop ecx
mov dword [ebp - 0x2dc], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x1007cd6e
push dword [ebp - 0x2e8]
mov ecx, eax
push dword [ebp - 0x2ec]
call fcn.1007c6ad
jmp 0x1007cd70
mov eax, ebx
mov byte [ebp - 4], bl
mov ecx, dword [edi + 4]
mov dword [edi + 4], eax
test ecx, ecx
je 0x1007cd84
mov eax, dword [ecx]
push 1
call dword [eax + 8]
xor ebx, ebx
inc ebx
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x1007cd98
push 1
mov ecx, esi
call fcn.1007c849
mov eax, ebx
call fcn.100cc9de
ret 0xc