Function at 0x4027f0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43e815
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x456528]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x44f43c
lea ecx, [ebp - 0x54]
call fcn.00404020
push str._StarRail.exe
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0
call fcn.00404020
lea edx, [ebp - 0x54]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x24]
call fcn.00402100
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 8
jb 0x402883
mov edx, dword [ebp - 0x24]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402879
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402a76
push ecx
push edx
call fcn.0041bcc4
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 7
mov word [ebp - 0x24], ax
cmp ecx, 8
jb 0x4028d8
mov edx, dword [ebp - 0x54]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4028ce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402a76
push ecx
push edx
call fcn.0041bcc4
add esp, 8
push str.C:StarRailBase.dat
lea ecx, [ebp - 0x54]
call fcn.00404020
push str._StarRailBase.dat
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 2
call fcn.00404020
lea edx, [ebp - 0x54]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x24]
call fcn.00402100
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x10]
cmp ecx, 8
jb 0x402946
mov edx, dword [ebp - 0x24]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40293c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402a7b
push ecx
push edx
call fcn.0041bcc4
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 7
mov word [ebp - 0x24], ax
cmp ecx, 8
jb 0x40299b
mov edx, dword [ebp - 0x54]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402991
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402a7b
push ecx
push edx
call fcn.0041bcc4
add esp, 8
push str.C:StarRailBase.dll
lea ecx, [ebp - 0x6c]
call fcn.00404020
push str._StarRailBase.dll
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 4
call fcn.00404020
lea edx, [ebp - 0x6c]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3c]
call fcn.00402100
mov ecx, dword [ebp - 0x28]
cmp ecx, 8
jb 0x402a05
mov edx, dword [ebp - 0x3c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4029fb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402a80
push ecx
push edx
call fcn.0041bcc4
add esp, 8
mov ecx, dword [ebp - 0x58]
xor eax, eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
cmp ecx, 8
jb 0x402a4f
mov edx, dword [ebp - 0x6c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402a45
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402a80
push ecx
push edx
call fcn.0041bcc4
add esp, 8
push 5
push 0
push 0
push str.C:StarRail.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret
call fcn.004217cf
call fcn.004217cf
call fcn.004217cf
int3