Function at 0x10025e60
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x100d9f50]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, ecx
push 0x100c9f64
push str.c:object.txt
mov dword [ebp - 0x234], edi
call fcn.1004860b
mov esi, eax
add esp, 8
mov dword [ebp - 0x22c], esi
test esi, esi
je 0x10026176
push ebx
push esi
push str.around:_n
call fcn.1004a8f7
mov eax, dword [edi]
mov edx, dword [eax + 0xa0]
add esp, 8
mov ecx, edi
call edx
xor ebx, ebx
cmp dword [edi + 0x328], ebx
jle 0x10026006
lea esi, [edi + 0x318]
mov dword [ebp - 0x228], esi
lea eax, [esi + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp ebx, dword [esi + 0x10]
jb 0x10025ef2
lea eax, [esi + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x10025ff3
push ebx
lea eax, [ebp - 0x240]
mov ecx, esi
call fcn.10013190
mov esi, eax
lea eax, [ebp - 0x24c]
call fcn.1000fef0
mov ecx, dword [eax]
test ecx, ecx
jne 0x10025f17
xor edx, edx
jmp 0x10025f19
mov edx, dword [ecx]
mov ecx, dword [eax + 8]
mov esi, dword [edx + 8]
mov eax, ecx
shr eax, 2
and ecx, 3
cmp esi, eax
ja 0x10025f2d
sub eax, esi
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
mov edi, dword [eax + ecx*4]
mov eax, dword [ebp - 0x228]
add eax, 0x28
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test edi, edi
je 0x10025fe7
push edi
lea esi, [ebp - 0x224]
call fcn.10001000
cmp dword [ebp - 0x210], 0x10
jb 0x10025f72
mov ecx, dword [ebp - 0x224]
push ecx
call fcn.10047d94
add esp, 4
push edi
lea esi, [ebp - 0x224]
call fcn.10001000
mov esi, 0x10
cmp dword [eax + 0x14], esi
jb 0x10025f8a
mov eax, dword [eax]
lea edx, [ebp - 0x108]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x10025f92
cmp dword [ebp - 0x210], esi
jb 0x10025fb3
mov edx, dword [ebp - 0x224]
push edx
call fcn.10047d94
add esp, 4
lea edi, [ebp - 0x108]
dec edi
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10025fc0
mov ecx, dword [ebp - 0x22c]
mov ax, word [0x100c8ea8]
push ecx
lea edx, [ebp - 0x108]
push edx
mov word [edi], ax
call fcn.1004a8f7
add esp, 8
mov esi, dword [ebp - 0x228]
mov edi, dword [ebp - 0x234]
inc ebx
cmp ebx, dword [edi + 0x328]
jl 0x10025ed4
mov esi, dword [ebp - 0x22c]
push esi
push str._nhero_packet:_n
call fcn.1004a8f7
mov eax, dword [edi]
mov edx, dword [eax + 0xac]
add esp, 8
mov ecx, edi
call edx
lea ebx, [edi + 0x374]
xor esi, esi
push ebx
mov dword [ebp - 0x228], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [edi + 0x36c]
push ebx
mov dword [ebp - 0x230], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x230], esi
jbe 0x10026142
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp esi, dword [edi + 0x36c]
jb 0x1002606f
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x10026115
push esi
lea ecx, [edi + 0x35c]
lea eax, [ebp - 0x24c]
call fcn.10013190
mov esi, eax
lea eax, [ebp - 0x240]
call fcn.1000fef0
mov ecx, dword [eax]
test ecx, ecx
jne 0x10026098
xor edx, edx
jmp 0x1002609a
mov edx, dword [ecx]
mov ecx, dword [eax + 8]
mov esi, dword [edx + 8]
mov eax, ecx
shr eax, 2
and ecx, 3
cmp esi, eax
ja 0x100260ae
sub eax, esi
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
mov esi, dword [eax + ecx*4]
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test esi, esi
je 0x1002610f
lea edx, [ebp - 0x108]
mov eax, esi
sub edx, esi
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x100260d0
lea edi, [ebp - 0x108]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x100260e1
mov edx, dword [ebp - 0x22c]
mov cx, word [0x100c8ea8]
push edx
lea eax, [ebp - 0x108]
push eax
mov word [edi], cx
call fcn.1004a8f7
mov edi, dword [ebp - 0x234]
add esp, 8
mov esi, dword [ebp - 0x228]
inc esi
push ebx
mov dword [ebp - 0x228], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [edi + 0x36c]
push ebx
mov dword [ebp - 0x230], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp esi, dword [ebp - 0x230]
jb 0x10026054
mov edx, dword [ebp - 0x22c]
push edx
call fcn.10048883
push str.c:object.txt
push str.notepad.exe__s
lea edx, [ebp - 0x208]
call fcn.1002c630
add esp, 0xc
push 5
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.10047d85
mov esp, ebp
pop ebp
ret