Function at 0x10015306
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1005c95e
mov eax, dword fs:[0]
push eax
sub esp, 0x1f8
mov eax, dword [0x10078060]
xor eax, esp
mov dword [esp + 0x1f0], eax
push ebx
push esi
push edi
mov eax, dword [0x10078060]
xor eax, esp
push eax
lea eax, [esp + 0x208]
mov dword fs:[0], eax
mov edx, dword [ebp + 0x10]
xor esi, esi
push esi
push esi
lea eax, [esp + 0x24]
call fcn.10029f1e
push edx
lea ecx, [esp + 0x178]
mov dword [esp + 0x214], 2
call fcn.10001fa7
lea eax, [esp + 0x174]
push eax
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x218], 3
call fcn.10037789
pop ecx
pop ecx
mov edi, eax
lea eax, [esp + 0xe0]
push eax
mov byte [esp + 0x214], 4
call fcn.10025deb
lea ecx, [esp + 0x1c]
push ecx
push edi
push eax
mov byte [esp + 0x21c], 5
call fcn.10025e4f
mov bl, al
neg bl
sbb bl, bl
lea eax, [esp + 0xe0]
inc bl
call fcn.10028613
push esi
push 1
lea ecx, [esp + 0x3c]
call fcn.10002274
push esi
push 1
lea ecx, [esp + 0x17c]
mov byte [esp + 0x218], 2
call fcn.10002274
test bl, bl
je 0x1001540e
push 0x10
push 0x10063ef8
push 0x10066940
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x10015892
push str.path
lea ecx, [esp + 0x178]
call fcn.10001fa7
sub esp, 0x1c
mov byte [esp + 0x22c], 6
mov ecx, esp
mov dword [esp + 0x34], esp
mov edi, 0x10062dcf
push edi
call fcn.10001fa7
lea eax, [esp + 0x190]
push eax
lea esi, [esp + 0x3c]
lea ebx, [esp + 0xac]
call fcn.10001305
push eax
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x234], 7
call fcn.100011df
add esp, 0x24
push 0
push 1
mov ecx, ebx
call fcn.10002274
push 0
push 1
lea ecx, [esp + 0x17c]
mov byte [esp + 0x218], 0xa
call fcn.10002274
push str.argv
lea ecx, [esp + 0x38]
call fcn.10001fa7
sub esp, 0x1c
mov byte [esp + 0x22c], 0xb
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
call fcn.10001fa7
lea eax, [esp + 0x50]
push eax
lea ebx, [esp + 0xc8]
call fcn.10001305
push eax
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x234], 0xc
call fcn.100011df
add esp, 0x24
push 0
push 1
mov ecx, ebx
call fcn.10002274
push 0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0x218], 0xf
call fcn.10002274
push str.account
lea ecx, [esp + 0x178]
call fcn.10001fa7
sub esp, 0x1c
mov byte [esp + 0x22c], 0x10
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
call fcn.10001fa7
lea eax, [esp + 0x190]
push eax
lea ebx, [esp + 0xac]
call fcn.10001305
push eax
lea ecx, [esp + 0x1ec]
mov byte [esp + 0x234], 0x11
call fcn.100011df
add esp, 0x24
push 0
push 1
mov ecx, ebx
call fcn.10002274
push 0
push 1
lea ecx, [esp + 0x17c]
mov byte [esp + 0x218], 0x14
call fcn.10002274
push str.password
lea ecx, [esp + 0x38]
call fcn.10001fa7
sub esp, 0x1c
mov byte [esp + 0x22c], 0x15
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
call fcn.10001fa7
lea eax, [esp + 0x50]
push eax
lea ebx, [esp + 0xe4]
call fcn.10001305
push eax
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x238], 0x16
call fcn.10037789
push eax
lea ecx, [esp + 0x210]
mov byte [esp + 0x23c], 0x17
call fcn.100011df
add esp, 0x2c
xor edi, edi
xor ebx, ebx
push edi
inc ebx
push ebx
lea ecx, [esp + 0xb0]
call fcn.10002274
push edi
push ebx
lea ecx, [esp + 0xcc]
call fcn.10002274
push edi
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x218], 0x1b
call fcn.10002274
or dword [esp + 0x14], 0xffffffff
mov ecx, dword [esp + 0x1b0]
push 8
pop esi
cmp dword [esp + 0x1f8], edi
jne 0x10015721
cmp dword [esp + 0x1c4], esi
jae 0x10015637
lea ecx, [esp + 0x1b0]
mov eax, dword [esp + 0x194]
cmp dword [esp + 0x1a8], esi
jae 0x1001564e
lea eax, [esp + 0x194]
push ecx
push eax
push str.execute_installer:__s__s
call fcn.100373f1
add esp, 0xc
push 0x38
lea eax, [esp + 0x58]
push edi
push eax
mov dword [esp + 0x5c], 0x3c
call fcn.10043280
mov eax, dword [esp + 0x1a0]
add esp, 0xc
cmp dword [esp + 0x1a8], esi
jae 0x1001568c
lea eax, [esp + 0x194]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x1b0]
cmp dword [esp + 0x1c4], esi
jae 0x100156a7
lea eax, [esp + 0x1b0]
mov dword [esp + 0x64], eax
lea eax, [esp + 0x50]
push eax
mov dword [esp + 0x60], str.open
mov dword [esp + 0x70], ebx
mov dword [esp + 0x58], 0x40
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x10015701
push 0xffffffffffffffff
push dword [esp + 0x8c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x8c]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [esp + 0x88]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10015847
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.execute_failed__last_error:__d
call fcn.100373f1
pop ecx
pop ecx
mov dword [esp + 0x14], 6
jmp 0x10015847
cmp dword [esp + 0x1c4], esi
jae 0x10015731
lea ecx, [esp + 0x1b0]
mov eax, dword [esp + 0x194]
cmp dword [esp + 0x1a8], esi
jae 0x10015748
lea eax, [esp + 0x194]
push ecx
push eax
push str.__ls___ls
lea ecx, [esp + 0x180]
call fcn.100347ad
add esp, 0xc
mov byte [esp + 0x210], 0x1c
mov ecx, dword [esp + 0x178]
cmp dword [esp + 0x18c], esi
jae 0x1001577d
lea ecx, [esp + 0x178]
mov eax, dword [esp + 0x1cc]
cmp dword [esp + 0x1e0], esi
jae 0x10015794
lea eax, [esp + 0x1cc]
push ecx
push eax
push str.execute_installer_as_account__s:__s
call fcn.100373f1
mov eax, dword [esp + 0x184]
add esp, 0xc
cmp dword [esp + 0x18c], esi
jae 0x100157ba
lea eax, [esp + 0x178]
mov edx, dword [esp + 0x1e8]
cmp dword [esp + 0x1fc], esi
jae 0x100157d1
lea edx, [esp + 0x1e8]
mov ecx, dword [esp + 0x1cc]
cmp dword [esp + 0x1e0], esi
jae 0x100157e8
lea ecx, [esp + 0x1cc]
push edx
push ecx
call fcn.100339a1
mov esi, eax
mov dword [esp + 0x18], esi
cmp esi, edi
je 0x10015815
cmp esi, 0xffffffff
je 0x10015815
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x10015830
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.execute_failed__last_error:__d
call fcn.100373f1
pop ecx
pop ecx
mov dword [esp + 0x14], 6
lea eax, [esp + 0x18]
call fcn.100031f2
push edi
push ebx
lea esi, [esp + 0x17c]
call fcn.10002370
push dword [esp + 0x14]
push str.installCode
push str.Softwareprojonepodlp_softwareInstall_
call fcn.10034865
push edi
push ebx
lea esi, [esp + 0x1ec]
call fcn.10002370
push edi
push ebx
lea esi, [esp + 0x1d0]
call fcn.10002370
push edi
push ebx
lea esi, [esp + 0x1b4]
call fcn.10002370
push edi
push ebx
lea esi, [esp + 0x198]
call fcn.10002370
or dword [esp + 0x210], 0xffffffff
lea esi, [esp + 0x1c]
call fcn.10029201
mov ecx, dword [esp + 0x208]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1f0]
xor ecx, esp
call fcn.10040b84
mov esp, ebp
pop ebp
ret 0x10