Function at 0x1007403c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100a592c
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x100cd130]
xor eax, esp
mov dword [esp + 0x80], eax
push ebx
push esi
push edi
mov eax, dword [0x100cd130]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
and dword [esp + 0x18], 0
mov edi, ecx
mov dword [esp + 0x1c], str.Execute
and dword [esp + 0xa0], 0
lea ebx, [edi + 4]
lea esi, [esp + 0x18]
mov dword [esp + 0x14], ebx
call fcn.100146c2
mov ecx, dword [edi + 0x40]
mov eax, dword [ecx]
call dword [eax]
xor ebx, ebx
cmp eax, ebx
je 0x1007426d
lea ecx, [esp + 0x74]
push ecx
push eax
call fcn.100214b7
mov byte [esp + 0xa0], 1
cmp dword [esp + 0x88], ebx
jne 0x10074133
push 0x100ba248
lea esi, [esp + 0x24]
call fcn.10003c27
mov edi, esi
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa0], 2
call fcn.1002e028
mov byte [esp + 0xa0], 3
cmp dword [eax + 0x18], 8
jb 0x10074104
mov eax, dword [eax + 4]
jmp 0x10074107
add eax, 4
mov ecx, dword [esp + 0x14]
push eax
call fcn.100146f2
pop ecx
push ebx
push 1
lea esi, [esp + 0x44]
call fcn.10001b64
push ebx
push 1
lea esi, [esp + 0x28]
call fcn.10001b64
lea esi, [esp + 0x74]
jmp 0x100742bf
push str._x__
lea esi, [esp + 0x5c]
call fcn.10003c27
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x7c]
mov ecx, esi
mov byte [esp + 0xa8], 4
call fcn.100041ab
push 0x100b3f28
mov eax, esi
push eax
call fcn.10003e6d
push str._zvkvpvkv
lea esi, [esp + 0x24]
call fcn.10003c27
mov edi, esi
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa0], 5
call fcn.1002e028
cmp dword [esp + 0x70], 8
mov ecx, dword [esp + 0x5c]
jae 0x10074194
lea ecx, [esp + 0x5c]
cmp dword [eax + 0x18], 8
jb 0x1007419f
mov eax, dword [eax + 4]
jmp 0x100741a2
add eax, 4
push 5
push ebx
push ecx
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ebx, eax
neg ebx
sbb bl, bl
xor edi, edi
push edi
push 1
lea esi, [esp + 0x44]
inc bl
call fcn.10001b64
push edi
push 1
lea esi, [esp + 0x28]
mov byte [esp + 0xa8], 4
call fcn.10001b64
test bl, bl
je 0x10074251
push 0x100ba2a8
lea esi, [esp + 0x24]
call fcn.10003c27
mov edi, esi
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa0], 6
call fcn.1002e028
mov byte [esp + 0xa0], 7
cmp dword [eax + 0x18], 8
jb 0x10074215
mov eax, dword [eax + 4]
jmp 0x10074218
add eax, 4
mov ecx, dword [esp + 0x14]
push eax
call fcn.100146f2
pop ecx
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [esp + 0x44]
call fcn.10001b64
push ebx
push edi
lea esi, [esp + 0x28]
call fcn.10001b64
push ebx
push edi
lea esi, [esp + 0x60]
call fcn.10001b64
push ebx
push edi
lea esi, [esp + 0x7c]
jmp 0x100742c2
push edi
push 1
lea esi, [esp + 0x60]
call fcn.10001b64
push edi
push 1
lea esi, [esp + 0x7c]
call fcn.10001b64
xor ebx, ebx
jmp 0x100742c7
push 0x100ba320
lea esi, [esp + 0x24]
call fcn.10003c27
mov edi, esi
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa0], 8
call fcn.1002e028
mov byte [esp + 0xa0], 9
cmp dword [eax + 0x18], 8
jb 0x100742a1
mov eax, dword [eax + 4]
jmp 0x100742a4
add eax, 4
mov ecx, dword [esp + 0x14]
push eax
call fcn.100146f2
pop ecx
push ebx
push 1
lea esi, [esp + 0x44]
call fcn.10001b64
lea esi, [esp + 0x20]
push ebx
push 1
call fcn.10001b64
or dword [esp + 0xa0], 0xffffffff
mov ecx, dword [esp + 0x18]
cmp ecx, ebx
je 0x100742db
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x80]
xor ecx, esp
call fcn.10084554
mov esp, ebp
pop ebp
ret