Function at 0x76b67500
Capabilities:
Create process on windows

Disassembly:
push 0xa4
push 0x76b9e4f0
call fcn.76b4e0a8
xor eax, eax
mov edx, eax
mov dword [ebp - 0x30], eax
mov ebx, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x1e], al
mov dword [ebp - 0x50], eax
cmp dword [ebp + 8], eax
jne 0x76b6754a
call sym.msvcrt.dll__errno
mov dword [eax], 0x16
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call sym.msvcrt.dll__invalid_parameter
add esp, 0x14
xor eax, eax
jmp 0x76b67a89
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x76b67554
jmp 0x76b67529
inc eax
mov cl, byte [eax]
cmp cl, 0x20
je 0x76b67553
cmp cl, 0x77
je 0x76b6756b
cmp cl, 0x72
je 0x76b6756b
xor edi, edi
mov esi, edi
jmp 0x76b67570
xor esi, esi
inc esi
xor edi, edi
test esi, esi
jne 0x76b67586
call sym.msvcrt.dll__errno
mov dword [eax], 0x16
push edi
push edi
push edi
push edi
push edi
jmp 0x76b6753b
mov byte [ebp - 0x20], cl
inc eax
mov cl, byte [eax]
cmp cl, 0x20
je 0x76b67589
test cl, cl
je 0x76b675a3
cmp cl, 0x74
je 0x76b675a3
cmp cl, 0x62
je 0x76b675a3
mov eax, edi
jmp 0x76b675a6
xor eax, eax
inc eax
test eax, eax
je 0x76b67574
mov byte [ebp - 0x1f], cl
cmp cl, 0x74
jne 0x76b675b9
mov edx, 0x4000
jmp 0x76b675c3
cmp cl, 0x62
jne 0x76b675c3
mov edx, 0x8000
or edx, 0x80
push edx
push 0x400
lea eax, [ebp - 0x48]
push eax
call sym.msvcrt.dll__pipe
add esp, 0xc
cmp eax, 0xffffffff
je 0x76b67a87
cmp byte [ebp - 0x20], 0x77
jne 0x76b67604
lea esi, [ebp - 0x48]
mov dword [ebp - 0x38], esi
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x40], eax
lea esi, [ebp - 0x58]
mov dword [ebp - 0x34], esi
jmp 0x76b6761f
xor edi, edi
inc edi
lea eax, [ebp - 0x44]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x48]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x34], eax
push 9
call fcn.76b5862a
pop ecx
test eax, eax
jne 0x76b67642
push dword [ebp - 0x48]
call sym.msvcrt.dll__close
push dword [ebp - 0x44]
call sym.msvcrt.dll__close
pop ecx
pop ecx
jmp 0x76b67543
push 9
call sym.msvcrt.dll__lock
pop ecx
and dword [ebp - 4], ebx
xor esi, esi
inc esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x5c], esi
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcess]
mov edx, eax
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
push 2
push esi
push 0
lea eax, [ebp - 0x30]
push eax
push edx
mov eax, ecx
sar eax, 5
and ecx, 0x1f
imul ecx, ecx, 0x24
mov eax, dword [eax*4 + sym.msvcrt.dll___pioinfo]
push dword [eax + ecx]
push edx
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_DuplicateHandle]
test eax, eax
je 0x76b67a55
mov eax, dword [ebp - 0x38]
push dword [eax]
call sym.msvcrt.dll__close
mov eax, dword [ebp - 0x3c]
xor ebx, ebx
mov dword [eax], ebx
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x40]
push dword [eax]
call sym.msvcrt.dll__fdopen
add esp, 0xc
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x76b67a52
push ebx
call fcn.76b67aab
pop ecx
mov dword [ebp - 0x54], eax
test eax, eax
je 0x76b67a3b
push 0x76af48cc
push ebx
lea eax, [ebp - 0x28]
push eax
call fcn.76b4ccdf
add esp, 0xc
mov esi, eax
test esi, esi
je 0x76b676fe
cmp esi, 0x16
jne 0x76b676fa
push ebx
push ebx
push ebx
push ebx
push ebx
call fcn.76b4977b
add esp, 0x14
test esi, esi
jne 0x76b67708
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ebx
test ebx, ebx
jne 0x76b67710
mov ebx, 0x76af48d8
mov dword [ebp - 0x24], ebx
push 0x44
pop esi
push esi
push 0
lea eax, [ebp - 0xb4]
push eax
call sym.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0x88], 0x100
mov eax, dword [ebp - 0x30]
mov ecx, dword [sym.msvcrt.dll___pioinfo]
test edi, edi
mov edx, eax
je 0x76b67746
mov edx, dword [ecx]
mov dword [ebp - 0x7c], edx
cmp edi, 1
je 0x76b67751
mov eax, dword [ecx + 0x24]
mov dword [ebp - 0x78], eax
mov eax, dword [ecx + 0x48]
mov dword [ebp - 0x74], eax
mov ecx, ebx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x76b6775f
sub ecx, edx
mov edx, dword [ebp + 8]
lea esi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x76b6776e
sub edx, esi
lea esi, [ecx + 5]
add esi, edx
push 1
push esi
call fcn.76b38729
pop ecx
pop ecx
mov ebx, eax
test ebx, ebx
je 0x76b67a3b
push dword [ebp - 0x24]
push esi
push ebx
call sym.msvcrt.dll_strcpy_s
add esp, 0xc
xor edi, edi
test eax, eax
je 0x76b677b0
push edi
push edi
push edi
push edi
push edi
call fcn.76b4977b
add esp, 0x14
push 0x76af6f90
push esi
push ebx
call sym.msvcrt.dll_strcat_s
add esp, 0xc
test eax, eax
je 0x76b677d0
push edi
push edi
push edi
push edi
push edi
call fcn.76b4977b
add esp, 0x14
push dword [ebp + 8]
push esi
push ebx
call sym.msvcrt.dll_strcat_s
add esp, 0xc
test eax, eax
je 0x76b677ee
push edi
push edi
push edi
push edi
push edi
call fcn.76b4977b
add esp, 0x14
xor eax, eax
lea edi, [ebp - 0x70]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call sym.msvcrt.dll__errno
mov edi, dword [eax]
mov dword [ebp - 0x4c], edi
push 0
mov esi, dword [ebp - 0x24]
push esi
call sym.msvcrt.dll__access_s
pop ecx
pop ecx
test eax, eax
jne 0x76b67835
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xb4]
push eax
xor eax, eax
push eax
push eax
push eax
push 1
push eax
push eax
push ebx
push esi
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateProcessA]
mov esi, eax
jmp 0x76b679ef
and dword [ebp - 0x2c], 0
push 1
push 0x104
call fcn.76b38729
pop ecx
pop ecx
mov esi, eax
test esi, esi
jne 0x76b67870
push eax
call sym.msvcrt.dll_free
push ebx
call sym.msvcrt.dll_free
push dword [ebp - 0x28]
call sym.msvcrt.dll_free
add esp, 0xc
call sym.msvcrt.dll__errno
mov dword [eax], edi
jmp 0x76b67a3b
push 0x76af4880
push 0
lea eax, [ebp - 0x2c]
push eax
call fcn.76b4ccdf
add esp, 0xc
mov edi, eax
test edi, edi
je 0x76b678cf
cmp edi, 0x16
jne 0x76b6789d
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call fcn.76b4977b
add esp, 0x14
test edi, edi
je 0x76b678cf
push dword [ebp - 0x2c]
call sym.msvcrt.dll_free
push esi
call sym.msvcrt.dll_free
push ebx
call sym.msvcrt.dll_free
push dword [ebp - 0x28]
call sym.msvcrt.dll_free
add esp, 0x10
call sym.msvcrt.dll__errno
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
jmp 0x76b67a3b
mov eax, dword [ebp - 0x2c]
push 0x103
push esi
push eax
call fcn.76b4e2a0
add esp, 0xc
mov dword [ebp - 0x60], eax
test eax, eax
je 0x76b679d9
cmp byte [esi], 0
je 0x76b679d9
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x76b678fa
sub ecx, edx
lea edi, [esi - 1]
add edi, ecx
mov al, byte [edi]
cmp al, 0x5c
jne 0x76b6793c
push 0x5c
push esi
call sym.msvcrt.dll__mbsrchr
pop ecx
pop ecx
cmp edi, eax
je 0x76b67966
push 0x76af4888
push 0x104
push esi
call sym.msvcrt.dll_strcat_s
add esp, 0xc
test eax, eax
je 0x76b67966
xor edi, edi
push edi
push edi
push edi
push edi
push edi
jmp 0x76b6795e
cmp al, 0x2f
je 0x76b67966
push 0x76af4888
push 0x104
push esi
call sym.msvcrt.dll_strcat_s
add esp, 0xc
test eax, eax
je 0x76b67966
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call fcn.76b4977b
add esp, 0x14
mov edx, esi
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x76b6796b
sub edx, ecx
mov ecx, dword [ebp - 0x24]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x76b6797a
sub ecx, edi
lea eax, [ecx + edx]
mov ecx, 0x104
cmp eax, ecx
jae 0x76b679d9
push dword [ebp - 0x24]
push ecx
push esi
call sym.msvcrt.dll_strcat_s
add esp, 0xc
xor edi, edi
test eax, eax
je 0x76b679af
push edi
push edi
push edi
push edi
push edi
call fcn.76b4977b
add esp, 0x14
push edi
push esi
call sym.msvcrt.dll__access_s
pop ecx
pop ecx
test eax, eax
jne 0x76b67a30
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xb4]
push eax
push edi
push edi
push edi
push 1
push edi
push edi
push ebx
push esi
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateProcessA]
mov dword [ebp - 0x50], eax
push dword [ebp - 0x2c]
call sym.msvcrt.dll_free
push esi
call sym.msvcrt.dll_free
pop ecx
pop ecx
mov edi, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x50]
push ebx
call sym.msvcrt.dll_free
push dword [ebp - 0x28]
call sym.msvcrt.dll_free
pop ecx
pop ecx
push dword [ebp - 0x30]
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test esi, esi
je 0x76b67a15
push dword [ebp - 0x6c]
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
call sym.msvcrt.dll__errno
mov dword [eax], edi
mov ecx, dword [ebp - 0x54]
test esi, esi
je 0x76b67a38
mov eax, dword [ebp - 0x70]
mov dword [ecx + 4], eax
mov ebx, dword [ebp - 0x1c]
mov dword [ecx], ebx
jmp 0x76b67a7b
mov eax, dword [ebp - 0x60]
jmp 0x76b678d2
and dword [ecx], 0
mov ebx, dword [ebp - 0x1c]
push ebx
call sym.msvcrt.dll_fclose
pop ecx
mov esi, dword [ebp - 0x34]
and dword [esi], 0
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
jmp 0x76b67a58
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0
je 0x76b67a6b
mov eax, dword [ebp - 0x38]
push dword [eax]
call sym.msvcrt.dll__close
pop ecx
cmp dword [esi], 0
je 0x76b67a7b
mov eax, dword [ebp - 0x40]
push dword [eax]
call sym.msvcrt.dll__close
pop ecx
mov dword [ebp - 4], 0xfffffffe
call fcn.76b67a9c
mov eax, ebx
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret