Function at 0x427c70
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x5978a4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x160
push esi
lea eax, [esp + 4]
push 4
push eax
lea ecx, [esp + 0x180]
mov dword [esp + 0x174], 1
call fcn.0056a835
mov eax, dword [eax]
push 0x5fe584
push eax
call fcn.0053d3fc
add esp, 8
lea ecx, [esp + 4]
mov esi, eax
call fcn.00575bd5
test esi, esi
pop esi
je 0x427f60
mov ecx, dword [0x6131b0]
push ebx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x178]
mov bl, 2
mov byte [esp + 0x16c], bl
mov eax, dword [ecx - 8]
cmp eax, 7
jl 0x427e72
add eax, 0xfffffff9
push 3
lea edx, [esp + 8]
push eax
push edx
lea ecx, [esp + 0x184]
call fcn.0056a79f
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x170], 3
call fcn.00575d0e
lea ecx, [esp + 4]
mov byte [esp + 0x16c], bl
call fcn.00575bd5
mov eax, dword [esp + 0x184]
mov ecx, dword [esp + 8]
push eax
push ecx
call fcn.0053d3fc
add esp, 8
test eax, eax
je 0x427e72
mov edx, dword [esp + 8]
push 0x5fe580
push edx
call fcn.0053d3fc
add esp, 8
test eax, eax
jne 0x427e72
push 3
push str.Software_aheadNero___Burning_RomNeverShowMeAgain
push SysReAllocStringLen
push str.EnglishHelpFile
lea ecx, [esp + 0x20]
call fcn.0042ef60
mov eax, dword [0x6131b0]
mov dword [esp + 4], eax
mov dword [esp + 0xc], eax
push 0x6f1a
lea ecx, [esp + 0x10]
mov byte [esp + 0x170], 6
call fcn.00576ee0
mov eax, dword [esp + 0xc]
push 0x19
lea ecx, [esp + 8]
push eax
push ecx
call fcn.0056ad27
mov edx, dword [esp + 0x10]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0
push 0x40
push edx
call fcn.0042f0d0
lea ecx, [esp + 0xc]
mov byte [esp + 0x16c], 5
call fcn.00575bd5
lea ecx, [esp + 4]
mov byte [esp + 0x16c], 4
call fcn.00575bd5
lea ecx, [esp + 0x124]
mov byte [esp + 0x16c], 0xc
call fcn.005892e1
lea ecx, [esp + 0x11c]
mov byte [esp + 0x16c], 0xb
call fcn.00575bd5
lea ecx, [esp + 0x118]
mov byte [esp + 0x16c], 0xa
call fcn.00575bd5
lea ecx, [esp + 0x80]
mov byte [esp + 0x16c], 9
call fcn.00422a00
lea ecx, [esp + 0x7c]
mov byte [esp + 0x16c], 8
call fcn.00575bd5
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x427e62
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x6c], 0
lea ecx, [esp + 0x10]
mov byte [esp + 0x16c], bl
call fcn.00576422
mov eax, dword [esp + 0x178]
push 5
push 0
push 0
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, eax
cmp edx, 0x20
jge 0x427f4c
cmp edx, 0x1f
jne 0x427ed9
push 0
lea ecx, [esp + 0x14]
call fcn.0042ed00
lea ecx, [esp + 0x10]
mov byte [esp + 0x16c], 0xd
call fcn.005768dc
lea ecx, [esp + 0x6c]
mov byte [esp + 0x16c], 0xe
call fcn.0042dd60
lea ecx, [esp + 0x10]
mov byte [esp + 0x16c], bl
call fcn.00576422
jmp 0x427f4c
push edi
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x14]
rep stosd dword es:[edi], eax
push eax
lea ecx, [esp + 0x18]
push 0xff
push ecx
push 0x400
push edx
push eax
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
mov edx, dword [0x6131b0]
mov dword [esp + 8], edx
lea eax, [esp + 0x14]
lea ecx, [esp + 8]
push eax
push 0x6f00
push ecx
mov byte [esp + 0x17c], 0xf
call fcn.0056adcf
mov edx, dword [esp + 0x14]
add esp, 0xc
push 0
push 0
push edx
call fcn.0057e45c
lea ecx, [esp + 8]
mov byte [esp + 0x170], bl
call fcn.00575bd5
pop edi
lea ecx, [esp + 8]
mov byte [esp + 0x16c], 1
call fcn.00575bd5
pop ebx
jmp 0x427f7c
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x178]
push eax
push ecx
mov ecx, dword [esp + 0x178]
call fcn.00574dce
lea ecx, [esp + 0x174]
mov byte [esp + 0x168], 0
call fcn.00575bd5
lea ecx, [esp + 0x180]
mov dword [esp + 0x168], 0xffffffff
call fcn.00575bd5
mov ecx, dword [esp + 0x160]
mov dword fs:[0], ecx
add esp, 0x16c
ret