Function at 0x427260
Capabilities:
Create process on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x88
push ebx
push esi
xor ebx, ebx
push edi
push 0x44
lea eax, [ebp - 0x88]
push ebx
push eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
call fcn.00408720
xor eax, eax
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x44]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp + 0x18]
add esp, 0xc
mov dword [eax], ebx
lea eax, [ebp - 0x10]
push eax
push 0x25
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], ebx
call fcn.004312d0
mov edi, eax
cmp edi, ebx
jge 0x4272cf
push 0x44987e
jmp 0x4273f3
lea eax, [ebp - 8]
push eax
push 0x44986c
push dword [ebp - 0x10]
call fcn.00431306
mov edi, eax
cmp edi, ebx
jge 0x4272f0
push 0x44984a
jmp 0x4273f3
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x10]
dec eax
je 0x427389
dec eax
je 0x42730f
mov edi, 0x8000ffff
push 0x44981a
jmp 0x4273f3
lea eax, [ebp - 0x14]
push eax
mov eax, dword [esi + 8]
push dword [eax + 0x24]
push 1
call fcn.0041ddaa
mov edi, eax
cmp edi, ebx
jge 0x42733e
mov eax, dword [esi + 8]
push dword [eax]
push 0x447a1a
push edi
call fcn.00430a6a
add esp, 0xc
jmp 0x427612
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x70]
mov eax, dword [eax]
push dword [eax + 0x18]
push dword [ebp - 0x14]
call fcn.00431306
mov edi, eax
cmp edi, ebx
jge 0x427365
push 0x449800
jmp 0x4273f3
push dword [ebp - 0xc]
lea eax, [ebp - 4]
push dword [ebp - 8]
push 0x4497c4
push eax
call fcn.0043007e
mov edi, eax
add esp, 0x10
cmp edi, ebx
jge 0x4273b3
push 0x44979e
jmp 0x4273f3
mov eax, dword [esi + 8]
push dword [eax + 0x8c]
lea eax, [ebp - 4]
push dword [ebp - 8]
push 0x449748
push eax
call fcn.0043007e
mov edi, eax
add esp, 0x10
cmp edi, ebx
jge 0x4273b3
push 0x449720
jmp 0x4273f3
mov eax, dword [esi + 0xc]
cmp eax, ebx
je 0x427400
cmp word [eax], bx
je 0x427400
push ebx
push 0x449712
lea eax, [ebp - 4]
push eax
call fcn.0042fcd4
mov edi, eax
cmp edi, ebx
jge 0x4273db
push 0x4496e0
jmp 0x4273f3
push ebx
push dword [esi + 0xc]
lea eax, [ebp - 4]
push eax
call fcn.0042fcd4
mov edi, eax
cmp edi, ebx
jge 0x427400
push 0x4496b0
push edi
call fcn.00430a6a
pop ecx
pop ecx
jmp 0x427612
mov eax, dword [ebp - 0xc]
cmp eax, ebx
jne 0x427410
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x8c]
push dword [ebp - 4]
push eax
push dword [esi + 0x10]
call fcn.00418ea2
push eax
mov eax, dword [esi + 8]
push dword [eax]
push dword [ebp + 0xc]
call fcn.004191f4
push eax
push 0x2000012d
push 1
call fcn.0040bfb2
add esp, 0x1c
lea eax, [ebp - 0x1c]
push eax
lea ebx, [ebp - 0x24]
call fcn.004270c6
mov edi, eax
xor ebx, ebx
cmp edi, ebx
jge 0x427460
push 0x449670
push edi
call fcn.00430a6a
pop ecx
pop ecx
jmp 0x427610
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x88]
push eax
push ebx
push ebx
push 0x8000000
push ebx
push ebx
push ebx
push dword [ebp - 4]
mov dword [ebp - 0x88], 0x44
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x4274d4
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x4274a3
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x4274ae
mov edi, 0x80004005
push edi
push 0x14a
push 0x4494e2
call fcn.004315c0
push dword [ebp - 8]
push 0x4477d8
push edi
call fcn.00430a6a
add esp, 0xc
jmp 0x427610
push 2
pop edi
push dword [ebp + 0x14]
xor ebx, ebx
lea eax, [ebp - 0x44]
inc ebx
push eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], 0x32
call dword [ebp + 0x10]
cmp eax, ebx
je 0x4274f9
test eax, eax
jne 0x427562
lea eax, [ebp - 0x18]
push eax
push 0x1f4
push dword [ebp - 0x34]
call fcn.0042e9a8
mov edi, eax
cmp edi, 0x80070102
je 0x4274d4
test edi, edi
js 0x427589
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x427596
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x42753d
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
test edi, edi
js 0x427548
mov edi, 0x80004005
push edi
push 0x161
push 0x4494e2
call fcn.004315c0
push 0x44964e
jmp 0x427453
xor ecx, ecx
cmp eax, edi
setne cl
lea edi, [ecx - 0x7ff8f9be]
push edi
push 0x154
push 0x4494e2
call fcn.004315c0
push 0x449618
jmp 0x427453
push dword [ebp - 8]
push 0x447754
jmp 0x4274c6
mov edi, dword [ebp - 0x18]
mov eax, 0xbc2
cmp edi, 0x80070bc2
jne 0x4275ab
mov edi, eax
mov dword [ebp - 0x18], edi
test edi, edi
je 0x4275da
cmp edi, ebx
je 0x4275dd
cmp edi, eax
je 0x4275d1
cmp edi, 0x240005
je 0x4275d1
cmp edi, 0x240006
je 0x4275da
cmp edi, 0x80240017
je 0x4275dd
jmp 0x427610
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
xor edi, edi
jmp 0x4275e4
mov dword [ebp - 0x20], ebx
xor edi, edi
cmp dword [ebp - 0x20], edi
je 0x427610
mov eax, dword [esi + 0x10]
cmp eax, 2
jne 0x427604
push dword [esi + 8]
call fcn.00427b64
mov edi, eax
test edi, edi
jns 0x427610
push 0x44771e
jmp 0x427453
cmp eax, ebx
jne 0x427610
push dword [esi + 8]
call fcn.00427c4e
xor ebx, ebx
cmp dword [ebp - 0x14], ebx
je 0x42761f
push dword [ebp - 0x14]
call fcn.0042eb62
cmp dword [ebp - 0xc], ebx
je 0x42762c
push dword [ebp - 0xc]
call fcn.0042eb62
cmp dword [ebp - 0x10], ebx
je 0x427639
push dword [ebp - 0x10]
call fcn.0042eb62
cmp dword [ebp - 8], ebx
je 0x427646
push dword [ebp - 8]
call fcn.0042eb62
cmp dword [ebp - 4], ebx
je 0x427653
push dword [ebp - 4]
call fcn.0042eb62
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x34], ebx
je 0x427666
push dword [ebp - 0x34]
call esi
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x30], ebx
je 0x427673
push dword [ebp - 0x30]
call esi
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x1c], ebx
je 0x427682
push 4
push dword [ebp - 0x24]
call fcn.0042705e
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x14