Function at 0x40273d
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b8
mov dword [ebp - 4], 0
mov eax, dword [ebp + 0xc]
push eax
push 0x4080e8
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
cmp dword [ebp - 8], 0
je 0x4027f5
push 0
call fcn.00401d8f
add esp, 4
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call fcn.00401fbe
add esp, 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x4027f5
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x10], 0
je 0x4027f3
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00402014
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4027d8
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
cmp ecx, dword [ebp - 0x10]
jne 0x4027d8
mov dword [ebp - 0x1b8], 1
jmp 0x4027e2
mov dword [ebp - 0x1b8], 0
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x4027f3
jmp 0x4027f5
jmp 0x40277d
cmp dword [ebp - 0xc], 0
jne 0x402a63
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
push 0
call fcn.00401d8f
add esp, 4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.00401fbe
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4028f4
mov edx, dword [ebp - 0x18]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4028ef
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 8]
push edx
call fcn.00402595
add esp, 4
test eax, eax
je 0x4028ef
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x4028ef
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x34]
and ecx, 0xd
test ecx, ecx
je 0x402891
jmp 0x40286a
mov edx, dword [ebp - 0x28]
cmp dword [edx + 0x10], 0
je 0x4028c9
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + 8]
push edx
push 0x4080f8
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x4028c7
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x34], 3
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 0x10], 0
jmp 0x40286a
cmp dword [ebp - 0x20], 0
je 0x4028e3
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x28]
push eax
call fcn.00402630
add esp, 8
test eax, eax
jle 0x4028ef
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], edx
jmp 0x40281a
cmp dword [ebp - 0x20], 0
je 0x402a4d
cmp dword [ebp - 0x1c], 0
je 0x402a4d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x408108
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x402a16
mov dword [ebp - 0xb0], 4
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 8]
push eax
push str.ZPrint32
push str._s__s
lea ecx, [ebp - 0xac]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
cmp dword [ebp - 0xb0], 4
jne 0x402a16
push 0
lea edx, [ebp - 0xac]
push edx
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x20
jb 0x402994
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 8]
push ecx
push str.ZPrint32Class
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 8], eax
jmp 0x402a11
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb4], eax
push 0x100
lea edx, [ebp - 0x1b4]
push edx
push 1
mov eax, dword [0x4088a4]
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
cmp dword [ebp - 0xb4], 0
je 0x4029f1
push 0
push 0x100
lea ecx, [ebp - 0x1b4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
and eax, 0xffff
push eax
mov edx, dword [ebp - 0xb4]
push edx
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push 5
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0xb0], eax
jmp 0x402952
cmp dword [ebp - 8], 0
je 0x402a4b
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004026b2
add esp, 0x10
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x402a4b
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edx]
mov dword [eax + 0x10], ecx
jmp 0x402a63
cmp dword [ebp - 8], 0
je 0x402a63
push 0
push 0
push 0x10
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret