Function at 0x892768
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x14
push 0
push 0
dec ecx
jne 0x892770
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x892d42
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x8927c6
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x875270]
call fcn.00875830
mov dword [ebp - 0xc], eax
xor ecx, ecx
mov dl, 1
mov eax, dword [0x87f704]
call fcn.0087fe58
mov dword [ebp - 0x10], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8927d0
xor eax, eax
push ebp
push 0x8927f2
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x44]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8927fc
xor eax, eax
push ebp
push 0x89281e
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x44]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892828
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
mov edx, 0x892d5c
call fcn.0040c28c
jne 0x89288a
xor ebx, ebx
test bl, bl
jne 0x892880
xor edx, edx
push ebp
push 0x892876
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00448c04
lea ecx, [ebp - 0x24]
mov edx, 0x892d6c
mov eax, dword [ebp - 0xc]
call fcn.00876170
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892880
mov eax, 0xfa
call fcn.004c78cc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
mov edx, 0x892d90
call fcn.0040c28c
jne 0x8928e6
xor edx, edx
push ebp
push 0x8928d2
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00448c04
lea ecx, [ebp - 0x34]
mov edx, 0x892d6c
mov eax, dword [ebp - 0xc]
call fcn.00876278
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8928dc
mov eax, 0xfa
call fcn.004c78cc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
mov edx, 0x892da0
call fcn.0040c28c
jne 0x892942
xor edx, edx
push ebp
push 0x89292e
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00448c04
lea ecx, [ebp - 0x44]
mov edx, 0x892d6c
mov eax, dword [ebp - 0xc]
call fcn.0087637c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892938
mov eax, 0xfa
call fcn.004c78cc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
mov edx, 0x892db0
call fcn.0040c28c
jne 0x89299e
xor edx, edx
push ebp
push 0x89298a
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00448c04
lea ecx, [ebp - 0x54]
mov edx, 0x892d6c
mov eax, dword [ebp - 0xc]
call fcn.00876484
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892994
mov eax, 0xfa
call fcn.004c78cc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
mov edx, 0x892dc0
call fcn.0040c28c
jne 0x8929ff
xor edx, edx
push ebp
push 0x8929eb
push dword fs:[edx]
mov dword fs:[edx], esp
push 0x892dd0
lea eax, [ebp - 0x64]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00448c04
lea ecx, [ebp - 0x64]
mov edx, 0x892d6c
mov eax, dword [ebp - 0xc]
call fcn.0087658c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8929f5
mov eax, 0xfa
call fcn.004c78cc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
mov edx, 0x892dec
call fcn.0040c28c
jne 0x892a60
xor edx, edx
push ebp
push 0x892a4c
push dword fs:[edx]
mov dword fs:[edx], esp
push 0x892dfc
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00448c04
lea ecx, [ebp - 0x74]
mov edx, 0x892d6c
mov eax, dword [ebp - 0xc]
call fcn.0087658c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892a56
mov eax, 0xfa
call fcn.004c78cc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
mov edx, 0x892e1c
call fcn.0040c28c
jne 0x892ac7
xor edx, edx
push ebp
push 0x892ab3
push dword fs:[edx]
mov dword fs:[edx], esp
push 0x892e2c
lea eax, [ebp - 0x84]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00448c04
lea ecx, [ebp - 0x84]
mov edx, 0x892d6c
mov eax, dword [ebp - 0xc]
call fcn.0087658c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892abd
mov eax, 0xfa
call fcn.004c78cc
mov eax, dword [ebp - 8]
cmp dword [eax + 0x38], 0
je 0x892c68
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
mov edx, 0x892e4c
call fcn.0040cc24
je 0x892c68
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
mov edx, 0x892e5c
call fcn.0040c28c
jne 0x892b4e
xor edx, edx
push ebp
push 0x892b3a
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
lea eax, [ebp - 0x94]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00448c04
lea ecx, [ebp - 0x94]
mov edx, 0x892e6c
mov eax, dword [ebp - 0x10]
call fcn.00880e34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892b44
mov eax, 0xfa
call fcn.004c78cc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
mov edx, 0x892e88
call fcn.0040c28c
jne 0x892c68
xor ebx, ebx
lea eax, [ebp - 4]
call fcn.0040b8b4
test bl, bl
jne 0x892bba
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x4c]
mov esi, eax
test esi, esi
jle 0x892bba
mov dword [ebp - 0x14], 1
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.0072cb34
mov eax, dword [ebp - 0x10]
mov edi, dword [eax + 0x88]
mov eax, dword [edi + 0x2c]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.0040cc24
jne 0x892bb4
lea eax, [ebp - 4]
mov edx, dword [edi + 0x24]
call fcn.0040bcec
inc dword [ebp - 0x14]
dec esi
jne 0x892b85
test bl, bl
jne 0x892c5e
cmp dword [ebp - 4], 0
je 0x892c5e
xor edx, edx
push ebp
push 0x892c0a
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
lea eax, [ebp - 0xa4]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00448c04
lea ecx, [ebp - 0xa4]
mov edx, 0x892e6c
mov eax, dword [ebp - 0x10]
call fcn.00880e34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892c14
mov eax, 1
call fcn.004c78cc
xor eax, eax
push ebp
push 0x892c54
push dword fs:[eax]
mov dword fs:[eax], esp
push 1
push 0x892e8c
push 0x892e8c
mov eax, dword [ebp - 4]
call fcn.0040c824
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892c5e
mov eax, 0xfa
call fcn.004c78cc
xor eax, eax
push ebp
push 0x892c8a
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x44]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892c94
xor eax, eax
push ebp
push 0x892cb6
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x44]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892cc0
xor eax, eax
push ebp
push 0x892ce0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.004099cc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892cea
xor eax, eax
push ebp
push 0x892d0a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.004099cc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x892d14
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x892d49
lea eax, [ebp - 0xa4]
mov edx, dword [0x4012c8]
mov ecx, 9
call fcn.0040da0c
lea eax, [ebp - 4]
call fcn.0040b8b4
pop eax
jmp eax