Function at 0x4271dc
Capabilities:
Create process on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x88
push ebx
push esi
xor ebx, ebx
push edi
push 0x44
lea eax, [ebp - 0x88]
push ebx
push eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
call fcn.00408720
xor eax, eax
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x44]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
lea eax, [ebp - 0x10]
push eax
push 0x25
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], ebx
call fcn.0043081c
mov edi, eax
cmp edi, ebx
jge 0x427246
push 0x44978a
jmp 0x42736a
lea eax, [ebp - 8]
push eax
push 0x449778
push dword [ebp - 0x10]
call fcn.00430852
mov edi, eax
cmp edi, ebx
jge 0x427267
push 0x449756
jmp 0x42736a
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x10]
dec eax
je 0x427300
dec eax
je 0x427286
mov edi, 0x8000ffff
push 0x449726
jmp 0x42736a
lea eax, [ebp - 0x14]
push eax
mov eax, dword [esi + 8]
push dword [eax + 0x24]
push 1
call fcn.004207ce
mov edi, eax
cmp edi, ebx
jge 0x4272b5
mov eax, dword [esi + 8]
push dword [eax]
push 0x447946
push edi
call fcn.004314ba
add esp, 0xc
jmp 0x42758d
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x70]
mov eax, dword [eax]
push dword [eax + 0x18]
push dword [ebp - 0x14]
call fcn.00430852
mov edi, eax
cmp edi, ebx
jge 0x4272dc
push 0x447924
jmp 0x42736a
push dword [ebp - 0xc]
lea eax, [ebp - 4]
push dword [ebp - 8]
push 0x4496ea
push eax
call fcn.0042ff9c
mov edi, eax
add esp, 0x10
cmp edi, ebx
jge 0x42732a
push 0x4496c4
jmp 0x42736a
mov eax, dword [esi + 8]
push dword [eax + 0x8c]
lea eax, [ebp - 4]
push dword [ebp - 8]
push 0x44966e
push eax
call fcn.0042ff9c
mov edi, eax
add esp, 0x10
cmp edi, ebx
jge 0x42732a
push 0x449646
jmp 0x42736a
mov eax, dword [esi + 0xc]
cmp eax, ebx
je 0x427377
cmp word [eax], bx
je 0x427377
push ebx
push 0x449638
lea eax, [ebp - 4]
push eax
call fcn.0042fbf2
mov edi, eax
cmp edi, ebx
jge 0x427352
push 0x449606
jmp 0x42736a
push ebx
push dword [esi + 0xc]
lea eax, [ebp - 4]
push eax
call fcn.0042fbf2
mov edi, eax
cmp edi, ebx
jge 0x427377
push 0x4495d6
push edi
call fcn.004314ba
pop ecx
pop ecx
jmp 0x42758d
mov eax, dword [ebp - 0xc]
cmp eax, ebx
jne 0x427387
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x8c]
push dword [ebp - 4]
push eax
push dword [esi + 0x10]
call fcn.0041bce6
push eax
mov eax, dword [esi + 8]
push dword [eax]
push dword [ebp + 0xc]
call fcn.0041c036
push eax
push 0x2000012d
push 1
call fcn.0040c33a
add esp, 0x1c
lea eax, [ebp - 0x1c]
push eax
lea ebx, [ebp - 0x24]
call fcn.00427042
mov edi, eax
xor ebx, ebx
cmp edi, ebx
jge 0x4273d7
push 0x449596
push edi
call fcn.004314ba
pop ecx
pop ecx
jmp 0x42758b
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x88]
push eax
push ebx
push ebx
push 0x8000000
push ebx
push ebx
push ebx
push dword [ebp - 4]
mov dword [ebp - 0x88], 0x44
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x42744b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x42741a
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x427425
mov edi, 0x80004005
push edi
push 0x145
push 0x44940a
call fcn.004314ce
push dword [ebp - 8]
push 0x447704
push edi
call fcn.004314ba
add esp, 0xc
jmp 0x42758b
push 2
pop edi
push dword [ebp + 0x14]
xor ebx, ebx
lea eax, [ebp - 0x44]
inc ebx
push eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], 0x32
call dword [ebp + 0x10]
cmp eax, ebx
je 0x427470
test eax, eax
jne 0x4274d9
lea eax, [ebp - 0x18]
push eax
push 0x1f4
push dword [ebp - 0x34]
call fcn.0042e91e
mov edi, eax
cmp edi, 0x80070102
je 0x42744b
test edi, edi
js 0x427500
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x42750d
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x4274b4
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
test edi, edi
js 0x4274bf
mov edi, 0x80004005
push edi
push 0x15c
push 0x44940a
call fcn.004314ce
push 0x449574
jmp 0x4273ca
xor ecx, ecx
cmp eax, edi
setne cl
lea edi, [ecx - 0x7ff8f9be]
push edi
push 0x14f
push 0x44940a
call fcn.004314ce
push 0x44953e
jmp 0x4273ca
push dword [ebp - 8]
push 0x447680
jmp 0x42743d
mov eax, dword [ebp - 0x18]
mov ecx, 0xbc2
cmp eax, 0x80070bc2
jne 0x427521
mov eax, ecx
mov dword [ebp - 0x18], eax
xor edi, edi
cmp eax, edi
je 0x427552
cmp eax, ebx
je 0x427555
cmp eax, ecx
je 0x42754b
cmp eax, 0x240005
je 0x42754b
cmp eax, 0x240006
je 0x427552
cmp eax, 0x80240017
je 0x427555
mov edi, 0x8000ffff
jmp 0x42758b
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
jmp 0x42755f
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp + 0x18]
mov dword [eax], edi
cmp dword [ebp - 0x20], edi
je 0x42758b
mov eax, dword [esi + 0x10]
cmp eax, 2
jne 0x42757f
push dword [esi + 8]
call fcn.0042808a
mov edi, eax
test edi, edi
jns 0x42758b
push 0x44764a
jmp 0x4273ca
cmp eax, ebx
jne 0x42758b
push dword [esi + 8]
call fcn.00428174
xor ebx, ebx
cmp dword [ebp - 0x14], ebx
je 0x42759a
push dword [ebp - 0x14]
call fcn.0042ead8
cmp dword [ebp - 0xc], ebx
je 0x4275a7
push dword [ebp - 0xc]
call fcn.0042ead8
cmp dword [ebp - 0x10], ebx
je 0x4275b4
push dword [ebp - 0x10]
call fcn.0042ead8
cmp dword [ebp - 8], ebx
je 0x4275c1
push dword [ebp - 8]
call fcn.0042ead8
cmp dword [ebp - 4], ebx
je 0x4275ce
push dword [ebp - 4]
call fcn.0042ead8
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x34], ebx
je 0x4275e1
push dword [ebp - 0x34]
call esi
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x30], ebx
je 0x4275ee
push dword [ebp - 0x30]
call esi
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x1c], ebx
je 0x4275fd
push 4
push dword [ebp - 0x24]
call fcn.00426fda
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x14