Function at 0x10244180
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1026c670
push sym.MSVCR71D.dll__except_handler3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xffffff40
push ebx
push esi
push edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x80], 0
cmp dword [ebp + 8], 0
je 0x102441fe
cmp dword [ebp + 0xc], 0
je 0x102441fe
mov eax, dword [ebp + 0xc]
movsx ecx, byte [eax]
cmp ecx, 0x77
je 0x10244203
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx]
cmp eax, 0x72
je 0x10244203
jmp 0x1024481e
mov ecx, dword [ebp + 0xc]
movsx edx, byte [ecx + 1]
cmp edx, 0x74
jne 0x1024421b
mov dword [ebp - 0xa0], 0x4000
jmp 0x10244231
mov eax, dword [ebp + 0xc]
movsx ecx, byte [eax + 1]
cmp ecx, 0x62
jne 0x10244231
mov dword [ebp - 0xa0], 0x8000
mov edx, dword [ebp - 0xa0]
or edx, 0x80
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 0xa0]
push eax
push 0x400
lea ecx, [ebp - 0xb8]
push ecx
call sym.MSVCR71D.dll__pipe
add esp, 0xc
cmp eax, 0xffffffff
jne 0x10244268
jmp 0x1024481e
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx]
cmp eax, 0x77
jne 0x10244293
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0xc4], 1
jmp 0x102442b1
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0xc4], 0
push 9
call fcn.10202720
add esp, 4
test eax, eax
jne 0x102442e4
mov ecx, dword [ebp - 0xb8]
push ecx
call sym.MSVCR71D.dll__close
add esp, 4
mov edx, dword [ebp - 0xb4]
push edx
call sym.MSVCR71D.dll__close
add esp, 4
xor eax, eax
jmp 0x10244824
push 9
call sym.MSVCR71D.dll__lock
add esp, 4
mov dword [ebp - 4], 0
mov dword [ebp - 0x94], 1
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x98], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x84], eax
push 2
push 1
push 0
lea ecx, [ebp - 0xb0]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp + eax*4 - 0xb8]
sar ecx, 5
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp + edx*4 - 0xb8]
and eax, 0x1f
imul eax, eax, 0x24
mov ecx, dword [ecx*4 + sym.MSVCR71D.dll___pioinfo]
mov edx, dword [ecx + eax]
push edx
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
jne 0x1024436f
jmp 0x102447b9
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp + ecx*4 - 0xb8]
push edx
call sym.MSVCR71D.dll__close
add esp, 4
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x98], 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp + edx*4 - 0xb8]
push eax
call sym.MSVCR71D.dll__fdopen
add esp, 8
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jne 0x102443c4
jmp 0x102447b9
push 0
call fcn.10244930
add esp, 4
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jne 0x102443e2
jmp 0x1024478f
push str.COMSPEC
call sym.MSVCR71D.dll_getenv
add esp, 4
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x10244439
call sym.MSVCR71D.dll__errno
cmp dword [eax], 2
je 0x1024440c
call sym.MSVCR71D.dll__errno
cmp dword [eax], 0xd
jne 0x10244439
mov ecx, dword [sym.MSVCR71D.dll__osver]
and ecx, 0x8000
je 0x10244426
mov dword [ebp - 0xc8], str.command.com
jmp 0x10244430
mov dword [ebp - 0xc8], str.cmd.exe
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0x30], edx
push 0x44
push 0
lea eax, [ebp - 0x78]
push eax
call sym.MSVCR71D.dll_memset
add esp, 0xc
mov dword [ebp - 0x78], 0x44
mov dword [ebp - 0x4c], 0x100
cmp dword [ebp - 0x9c], 0
jne 0x1024446e
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0xcc], ecx
jmp 0x1024447c
mov edx, dword [sym.MSVCR71D.dll___pioinfo]
mov eax, dword [edx]
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x9c], 1
jne 0x1024449c
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0xd0], edx
jmp 0x102444aa
mov eax, dword [sym.MSVCR71D.dll___pioinfo]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0xd0], ecx
mov edx, dword [ebp - 0xd0]
mov dword [ebp - 0x3c], edx
mov eax, dword [sym.MSVCR71D.dll___pioinfo]
mov ecx, dword [eax + 0x48]
mov dword [ebp - 0x38], ecx
push 0xf7
push str.popen.c
push 2
mov edx, dword [ebp - 0x30]
push edx
call sym.MSVCR71D.dll_strlen
add esp, 4
mov esi, eax
push 0x1026c65c
call sym.MSVCR71D.dll_strlen
add esp, 4
add esi, eax
mov eax, dword [ebp + 8]
push eax
call sym.MSVCR71D.dll_strlen
add esp, 4
lea ecx, [esi + eax + 1]
push ecx
call sym.MSVCR71D.dll__malloc_dbg
add esp, 0x10
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x10244514
jmp 0x1024478f
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x90]
push eax
call sym.MSVCR71D.dll__mbscpy
add esp, 8
push 0x1026c65c
mov ecx, dword [ebp - 0x90]
push ecx
call sym.MSVCR71D.dll__mbscat
add esp, 8
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x90]
push eax
call sym.MSVCR71D.dll__mbscat
add esp, 8
push 0
mov ecx, dword [ebp - 0x30]
push ecx
call sym.MSVCR71D.dll__access
add esp, 8
cmp eax, 0xffffffff
je 0x10244591
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x78]
push eax
push 0
push 0
push 0
push 1
push 0
push 0
mov ecx, dword [ebp - 0x90]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 0xa8], eax
jmp 0x1024472d
push str.PATH
call sym.MSVCR71D.dll_getenv
add esp, 4
mov dword [ebp - 0x7c], eax
push 0x110
push str.popen.c
push 2
push 0x104
call sym.MSVCR71D.dll__malloc_dbg
add esp, 0x10
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jne 0x102445df
push 2
mov eax, dword [ebp - 0x90]
push eax
call sym.MSVCR71D.dll__free_dbg
add esp, 8
jmp 0x1024478f
push 0x103
mov ecx, dword [ebp - 0xa4]
push ecx
mov edx, dword [ebp - 0x7c]
push edx
call fcn.1023e9a0
add esp, 0xc
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x1024471c
mov eax, dword [ebp - 0xa4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1024471c
mov edx, dword [ebp - 0xa4]
push edx
call sym.MSVCR71D.dll_strlen
add esp, 4
mov ecx, dword [ebp - 0xa4]
lea edx, [ecx + eax - 1]
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0xbc]
movsx ecx, byte [eax]
cmp ecx, 0x5c
jne 0x10244671
push 0x5c
mov edx, dword [ebp - 0xa4]
push edx
call sym.MSVCR71D.dll__mbsrchr
add esp, 8
cmp dword [ebp - 0xbc], eax
je 0x1024466f
push 0x1026b3d0
mov eax, dword [ebp - 0xa4]
push eax
call sym.MSVCR71D.dll__mbscat
add esp, 8
jmp 0x10244693
mov ecx, dword [ebp - 0xbc]
movsx edx, byte [ecx]
cmp edx, 0x2f
je 0x10244693
push 0x1026b3d0
mov eax, dword [ebp - 0xa4]
push eax
call sym.MSVCR71D.dll__mbscat
add esp, 8
mov ecx, dword [ebp - 0xa4]
push ecx
call sym.MSVCR71D.dll_strlen
add esp, 4
mov esi, eax
mov edx, dword [ebp - 0x30]
push edx
call sym.MSVCR71D.dll_strlen
add esp, 4
add esi, eax
cmp esi, 0x104
jae 0x102446cf
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0xa4]
push ecx
call sym.MSVCR71D.dll__mbscat
add esp, 8
jmp 0x102446d1
jmp 0x1024471c
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sym.MSVCR71D.dll__access
add esp, 8
cmp eax, 0xffffffff
je 0x10244717
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x78]
push ecx
push 0
push 0
push 0
push 1
push 0
push 0
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 0xa8], eax
jmp 0x1024471c
jmp 0x102445df
push 2
mov ecx, dword [ebp - 0xa4]
push ecx
call sym.MSVCR71D.dll__free_dbg
add esp, 8
push 2
mov edx, dword [ebp - 0x90]
push edx
call sym.MSVCR71D.dll__free_dbg
add esp, 8
mov eax, dword [ebp - 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0xa8], 0
je 0x1024475f
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x88], ecx
jmp 0x10244761
jmp 0x10244783
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x88]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0xac]
mov edx, dword [ebp - 0xc0]
mov dword [ecx], edx
jmp 0x10244805
mov eax, dword [ebp - 0xac]
mov dword [eax], 0
mov ecx, dword [ebp - 0xc0]
push ecx
call sym.MSVCR71D.dll_fclose
add esp, 4
mov edx, dword [ebp - 0xc4]
mov dword [ebp + edx*4 - 0x98], 0
mov dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp + eax*4 - 0x98], 0
je 0x102447df
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp + ecx*4 - 0xb8]
push edx
call sym.MSVCR71D.dll__close
add esp, 4
mov eax, dword [ebp - 0xc4]
cmp dword [ebp + eax*4 - 0x98], 0
je 0x10244805
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + ecx*4 - 0xb8]
push edx
call sym.MSVCR71D.dll__close
add esp, 4
mov dword [ebp - 4], 0xffffffff
call fcn.10244813
jmp 0x1024481e
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret