Function at 0x407142
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x46c
push ebx
push esi
push edi
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x114], 1
mov dword [ebp - 4], 1
cmp dword [0x4232a8], 0
je 0x4071de
mov eax, 1
jmp 0x4075b7
push 0
push 2
push dword [ebp + 8]
call fcn.004037e7
mov dword [ebp - 0x128], eax
push 0
call fcn.00419950
mov dword [ebp - 0x120], eax
push 0
call fcn.00419950
mov dword [ebp - 0x334], eax
push dword [ebp - 0x120]
call fcn.004199f0
mov dword [ebp - 0x120], 0
push 0
call fcn.00419950
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x114], 0
je 0x40728c
mov dword [ebp - 0x114], 0
push 1
push dword [ebp - 0x120]
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x42194c
push dword [ebp + 0xc]
call fcn.0040e79a
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jne 0x407287
mov eax, 1
jmp 0x4075b7
jmp 0x4072b9
push 2
push dword [ebp - 0x120]
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x421950
push dword [ebp + 0xc]
call fcn.0040e79a
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jge 0x4072d0
mov eax, 0xffffffe6
jmp 0x4075b7
push dword [ebp - 0x120]
call fcn.00419610
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0
jne 0x407305
cmp dword [ebp - 0x118], 1
jne 0x407300
jmp 0x407536
jmp 0x40720a
push dword [ebp - 0x120]
call fcn.00419690
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
jne 0x40733a
cmp dword [ebp - 0x118], 1
jne 0x407335
jmp 0x407536
jmp 0x40720a
test byte [ebp - 0x33c], 0x20
jne 0x40734c
jmp 0x40720a
push dword [ebp - 0x338]
push dword [ebp - 0x340]
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x40737e
push dword [ebp - 0x340]
call fcn.0040a006
test eax, eax
je 0x40737e
jmp 0x40720a
push dword [ebp - 0x338]
call fcn.0040a006
test eax, eax
jne 0x407396
jmp 0x40720a
test byte [ebp - 0x33c], 2
je 0x4073c1
push 1
push 1
push 0xffffffffffffffff
push dword [ebp - 0x338]
call fcn.00410d54
mov dword [ebp - 0x11c], eax
xor eax, eax
jmp 0x4075b7
push 0
push 1
push 0xffffffffffffffff
push dword [ebp - 0x338]
call fcn.00410d54
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jle 0x4073ea
jmp 0x40720a
cmp dword [ebp - 0x11c], 0
jge 0x4073ff
inc dword [ebp - 8]
jmp 0x40720a
push dword [ebp - 0x338]
call fcn.00407e04
add esp, 4
test eax, eax
je 0x40750e
push dword [ebp - 0x338]
call fcn.00406c67
add esp, 4
test eax, eax
je 0x40750e
lea eax, [ebp - 0x330]
push eax
push dword [ebp - 0x338]
call fcn.0040c8a7
push 0x421954
lea eax, [ebp - 0x330]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4074ce
push 0
lea eax, [ebp - 0x110]
push eax
call fcn.0040b9b6
lea eax, [ebp - 0x22c]
push eax
push dword [ebp - 0x338]
call fcn.0040b314
lea eax, [ebp - 0x22c]
push eax
call fcn.0040b975
push dword [ebp - 0x338]
push str.__s___UNREGSERVER
lea eax, [ebp - 0x330]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 1
lea eax, [ebp - 0x330]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp eax, 0x20
jae 0x4074bd
mov dword [ebp - 4], 0
lea eax, [ebp - 0x110]
push eax
call fcn.0040b975
jmp 0x4074dc
push dword [ebp - 0x338]
call fcn.00406e9e
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4074e9
inc dword [ebp - 8]
push dword [ebp - 0x338]
push dword [ebp - 0x334]
call fcn.004196f0
test eax, eax
jne 0x407509
xor eax, eax
jmp 0x4075b7
jmp 0x40751f
push 1
push 1
push 0
push dword [ebp - 0x338]
call fcn.00410d54
cmp dword [ebp - 0x118], 1
jne 0x407531
jmp 0x407536
jmp 0x40720a
push dword [ebp - 0x334]
call fcn.00419610
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x40759c
push 1
push dword [ebp - 0x124]
push dword [ebp + 8]
call fcn.004070e3
add esp, 0xc
test eax, eax
jne 0x407586
push dword [ebp - 0x124]
call fcn.00408983
cmp eax, 0xffffffff
jne 0x407586
inc dword [ebp - 8]
push dword [ebp - 0x334]
call fcn.00419690
mov dword [ebp - 0x124], eax
jmp 0x407547
cmp dword [ebp - 8], 0
jle 0x4075ad
xor eax, eax
jmp 0x4075b7
mov eax, 1
jmp 0x4075b7
pop edi
pop esi
pop ebx
leave
ret 8