Function at 0x420eb0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b2e8a
mov eax, dword fs:[0]
push eax
sub esp, 0x104
mov eax, dword [0x4d84d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x834]
jne 0x420fca
mov ecx, dword [ebp - 0x14]
call fcn.0042a8a0
mov eax, dword [ebp - 0x14]
movzx ecx, word [eax + 0x9f8]
cmp ecx, 0x804
jne 0x420f6d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xec], esp
push 0x4b6a90
call fcn.00404750
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xe8], esp
push 0x4b7de8
call fcn.00404750
mov dword [ebp - 0x110], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x14]
call fcn.004232c0
jmp 0x420fc5
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xe4], esp
push 0x4b6a90
call fcn.00404750
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], 1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xe0], esp
push 0x4b7e00
call fcn.00404750
mov dword [ebp - 0x110], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x14]
call fcn.004232c0
jmp 0x4213ea
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x838]
jne 0x4210b3
mov ecx, dword [ebp - 0x14]
call fcn.0042a8a0
mov eax, dword [ebp - 0x14]
movzx ecx, word [eax + 0x9f8]
cmp ecx, 0x804
jne 0x421056
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xdc], esp
push 0x4b6a90
call fcn.00404750
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd8], esp
push 0x4b7de8
call fcn.00404750
mov dword [ebp - 0x110], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x14]
call fcn.004232c0
jmp 0x4210ae
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push 0x4b6a90
call fcn.00404750
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd0], esp
push 0x4b7e00
call fcn.00404750
mov dword [ebp - 0x110], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x14]
call fcn.004232c0
jmp 0x4213ea
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x844]
jne 0x4211c9
mov eax, dword [ebp - 0x14]
movzx ecx, byte [eax + 0xa29]
test ecx, ecx
je 0x4210e6
mov ecx, dword [ebp - 0x14]
call fcn.00429d60
jmp 0x4211c4
mov ecx, dword [ebp - 0x14]
call fcn.00428ee0
push 1
mov ecx, dword [ebp - 0x14]
call fcn.00428a20
mov ecx, dword [ebp - 0x14]
call fcn.0042a8a0
mov eax, dword [ebp - 0x14]
movzx ecx, word [eax + 0x9f8]
cmp ecx, 0x804
jne 0x42116c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xcc], esp
push 0x4b6a90
call fcn.00404750
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xc8], esp
push 0x4b7d94
call fcn.00404750
mov dword [ebp - 0x110], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x14]
call fcn.004232c0
jmp 0x4211c4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xc4], esp
push 0x4b6a90
call fcn.00404750
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], 5
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xc0], esp
push str.Droid4X_is_being_installed_
call fcn.00404750
mov dword [ebp - 0x110], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x14]
call fcn.004232c0
jmp 0x4213ea
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x83c]
jne 0x4211ea
mov ecx, dword [ebp - 0x14]
call fcn.00422710
jmp 0x4213ea
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x878]
jne 0x42120b
mov ecx, dword [ebp - 0x14]
call fcn.00426260
jmp 0x4213ea
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x840]
jne 0x4212ad
lea ecx, [ebp - 0x2c]
call fcn.0042f850
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x2c]
call fcn.0042f890
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00419820
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x44]
call fcn.00418270
movzx eax, al
test eax, eax
jne 0x42128d
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x880
call fcn.0041d370
lea ecx, [ebp - 0x44]
call fcn.00403a30
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x85c]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x85c]
mov edx, dword [eax + 0x2c]
call edx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x44]
call fcn.00402c50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0042f870
jmp 0x4213ea
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x848]
jne 0x4212fc
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x880
call fcn.00419860
push 1
push 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00403a30
push eax
push 0x4b7e38
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x5c]
call fcn.00402c50
jmp 0x4213ea
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x84c]
jne 0x4213ea
lea ecx, [ebp - 0x74]
call fcn.00404610
mov dword [ebp - 4], 8
push 4
lea ecx, [ebp - 0x78]
call fcn.00424830
lea eax, [ebp - 0x78]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x880
call fcn.00425c40
mov ecx, eax
call fcn.00424800
jmp 0x421350
lea eax, [ebp - 0xbc]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x880
call fcn.00425c40
mov ecx, eax
call fcn.004256b0
push eax
lea ecx, [ebp - 0x78]
call fcn.0041fb00
movzx ecx, al
test ecx, ecx
je 0x421398
lea ecx, [ebp - 0x78]
call fcn.0041fb70
mov ecx, eax
call fcn.00406f40
push eax
lea ecx, [ebp - 0x74]
call fcn.004049a0
jmp 0x421398
push 1
push 0
push 0
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x104]
push ecx
call fcn.0040a680
add esp, 8
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
call fcn.00403a30
push eax
push 0x4b7e38
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x104]
call fcn.00402c50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74]
call fcn.004048f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004909b2
mov esp, ebp
pop ebp
ret 4