Function at 0x422d97
Capabilities:
Create process on windows

Disassembly:
push 0x104
mov eax, 0x568724
call fcn.0053d749
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x64], eax
lea ebx, [ebp - 0x84]
mov dword [ebp - 4], 4
call fcn.00422cc3
mov esi, 0x59a898
push esi
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.0040f341
push str.___Uid:
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 6
call fcn.0040f341
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 7
call fcn.0040f341
push str.____PF:
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 8
call fcn.0040f341
push str.____S:
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 9
call fcn.0040f341
push str.__J___DS:
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xa
call fcn.0040f341
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 0xb
call fcn.00401c01
lea ecx, [ebp - 0x7c]
push ecx
push eax
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0xc
call fcn.00401c01
lea ecx, [ebp + 0x10]
push ecx
push eax
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0xd
call fcn.00401c01
lea ecx, [ebp - 0x8c]
push ecx
push eax
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0xe
call fcn.00401c01
lea ecx, [ebp + 8]
push ecx
push eax
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0xf
push eax
call fcn.00401c01
lea ecx, [ebp - 0x70]
push ecx
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x10
call fcn.00401c01
add esp, 0x48
lea ecx, [ebp - 0x88]
push ecx
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x11
call fcn.00401c01
lea ecx, [ebp + 0x1c]
push ecx
push eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x12
call fcn.00401c01
lea ecx, [ebp - 0x80]
push ecx
push eax
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x13
call fcn.00401c01
add esp, 0x24
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0xa4]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0xac]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0x9c]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0xa0]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0xa8]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0x98]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0x78]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0x7c]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0x88]
add ecx, 0xfffffff0
call fcn.00402a50
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.00402a50
mov eax, dword [ebp + 0x14]
mov eax, dword [eax - 0xc]
xor ebx, ebx
cmp eax, ebx
jle 0x422fdd
mov esi, 0x599bbc
push esi
call fcn.0053894e
pop ecx
push eax
push esi
lea ecx, [ebp - 0x68]
call fcn.0040ba79
mov eax, dword [ebp + 0x14]
push dword [eax - 0xc]
lea ecx, [ebp - 0x68]
push eax
call fcn.0040ba79
push dword [ebp + 0x1c]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0x40
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x10c]
push ebx
push eax
call fcn.00538860
mov dword [ebp - 0xbc], ebx
xor eax, eax
lea edi, [ebp - 0xb8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x2f
mov esi, str...CommonProjectMgr.cpp
push esi
stosd dword es:[edi], eax
mov dword [ebp - 0x110], 0x44
call fcn.00538fb0
add esp, 0x14
test eax, eax
je 0x42302e
push 0x2f
jmp 0x42303e
push 0x5c
push esi
call fcn.00538fb0
pop ecx
pop ecx
test eax, eax
je 0x423049
push 0x5c
push esi
call fcn.00538fb0
pop ecx
pop ecx
inc eax
jmp 0x42304b
mov eax, esi
push 1
push 0x2f1
push eax
lea esi, [ebp - 0x60]
call fcn.00404e75
push str.RunDCUProject__CreateProcess_ProjectRunner_
push ebx
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.00404f53
mov esi, eax
call fcn.00402aa4
pop ecx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x22
call fcn.00404ee1
push dword [ebp - 0x68]
mov dword [ebp - 0x74], ebx
call fcn.0053c3f1
pop ecx
mov esi, eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x110]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push esi
push dword [ebp - 0x84]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x423158
mov eax, dword [ebp - 0x6c]
push 0xffffffffffffffff
cmp eax, ebx
je 0x4230ea
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0xc0], eax
push ebx
lea eax, [ebp - 0xc4]
push eax
push 2
mov dword [ebp - 0xc4], ecx
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
jmp 0x4230f6
push dword [ebp - 0xbc]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0xbc]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x423148
cmp dword [ebp - 0x74], 0xffffffff
jne 0x423148
cmp dword [ebp - 0x64], ebx
je 0x423148
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0x599168
lea ecx, [ebp - 0x64]
call fcn.0040266d
push 1
lea edx, [ebp - 0x64]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x24
call fcn.00421f52
pop ecx
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.00402a50
push dword [ebp - 0xbc]
call edi
push dword [ebp - 0xb8]
call edi
push esi
call fcn.0053823b
pop ecx
cmp dword [ebp - 0x6c], ebx
je 0x423169
push dword [ebp - 0x6c]
call edi
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp - 0x84]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.00402a50
mov ecx, dword [ebp + 0x1c]
add ecx, 0xfffffff0
call fcn.00402a50
call fcn.0053d7cc
ret