Function at 0x10245f30
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1026c8c0
push sym.MSVCR71D.dll__except_handler3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xffffff40
push ebx
push esi
push edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x80], 0
cmp dword [ebp + 8], 0
je 0x10245fae
cmp dword [ebp + 0xc], 0
je 0x10245fae
mov eax, dword [ebp + 0xc]
movzx ecx, word [eax]
cmp ecx, 0x77
je 0x10245fb3
mov edx, dword [ebp + 0xc]
movzx eax, word [edx]
cmp eax, 0x72
je 0x10245fb3
jmp 0x102465a1
mov ecx, dword [ebp + 0xc]
movzx edx, word [ecx + 2]
cmp edx, 0x74
jne 0x10245fcb
mov dword [ebp - 0xa0], 0x4000
jmp 0x10245fe1
mov eax, dword [ebp + 0xc]
movzx ecx, word [eax + 2]
cmp ecx, 0x62
jne 0x10245fe1
mov dword [ebp - 0xa0], 0x8000
mov edx, dword [ebp - 0xa0]
or edx, 0x80
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 0xa0]
push eax
push 0x400
lea ecx, [ebp - 0xb8]
push ecx
call sym.MSVCR71D.dll__pipe
add esp, 0xc
cmp eax, 0xffffffff
jne 0x10246018
jmp 0x102465a1
mov edx, dword [ebp + 0xc]
movzx eax, word [edx]
cmp eax, 0x77
jne 0x10246043
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0xc4], 1
jmp 0x10246061
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0xc4], 0
push 9
call fcn.10202720
add esp, 4
test eax, eax
jne 0x10246094
mov ecx, dword [ebp - 0xb8]
push ecx
call sym.MSVCR71D.dll__close
add esp, 4
mov edx, dword [ebp - 0xb4]
push edx
call sym.MSVCR71D.dll__close
add esp, 4
xor eax, eax
jmp 0x102465a7
push 9
call sym.MSVCR71D.dll__lock
add esp, 4
mov dword [ebp - 4], 0
mov dword [ebp - 0x94], 1
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x98], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x84], eax
push 2
push 1
push 0
lea ecx, [ebp - 0xb0]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp + eax*4 - 0xb8]
sar ecx, 5
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp + edx*4 - 0xb8]
and eax, 0x1f
imul eax, eax, 0x24
mov ecx, dword [ecx*4 + sym.MSVCR71D.dll___pioinfo]
mov edx, dword [ecx + eax]
push edx
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
jne 0x1024611f
jmp 0x1024653c
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp + ecx*4 - 0xb8]
push edx
call sym.MSVCR71D.dll__close
add esp, 4
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x98], 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp + edx*4 - 0xb8]
push eax
call sym.MSVCR71D.dll__wfdopen
add esp, 8
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jne 0x10246174
jmp 0x1024653c
push 0
call fcn.102465c0
add esp, 4
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jne 0x10246192
jmp 0x10246512
push 0x1026b76c
call sym.MSVCR71D.dll__wgetenv
add esp, 4
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x102461e9
call sym.MSVCR71D.dll__errno
cmp dword [eax], 2
je 0x102461bc
call sym.MSVCR71D.dll__errno
cmp dword [eax], 0xd
jne 0x102461e9
mov ecx, dword [sym.MSVCR71D.dll__osver]
and ecx, 0x8000
je 0x102461d6
mov dword [ebp - 0xc8], 0x1026b704
jmp 0x102461e0
mov dword [ebp - 0xc8], 0x1026b6f4
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0x30], edx
push 0x44
push 0
lea eax, [ebp - 0x78]
push eax
call sym.MSVCR71D.dll_memset
add esp, 0xc
mov dword [ebp - 0x78], 0x44
mov dword [ebp - 0x4c], 0x100
cmp dword [ebp - 0x9c], 0
jne 0x1024621e
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0xcc], ecx
jmp 0x1024622c
mov edx, dword [sym.MSVCR71D.dll___pioinfo]
mov eax, dword [edx]
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x9c], 1
jne 0x1024624c
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0xd0], edx
jmp 0x1024625a
mov eax, dword [sym.MSVCR71D.dll___pioinfo]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0xd0], ecx
mov edx, dword [ebp - 0xd0]
mov dword [ebp - 0x3c], edx
mov eax, dword [sym.MSVCR71D.dll___pioinfo]
mov ecx, dword [eax + 0x48]
mov dword [ebp - 0x38], ecx
push 0xf7
push str.f:_vs70builds3077_vccrtbldcrt_srcpopen.c
push 2
mov edx, dword [ebp - 0x30]
push edx
call sym.MSVCR71D.dll_wcslen
add esp, 4
mov esi, eax
push str.__c
call sym.MSVCR71D.dll_wcslen
add esp, 4
add esi, eax
mov eax, dword [ebp + 8]
push eax
call sym.MSVCR71D.dll_wcslen
add esp, 4
add esi, eax
lea ecx, [esi + esi + 2]
push ecx
call sym.MSVCR71D.dll__malloc_dbg
add esp, 0x10
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x102462c6
jmp 0x10246512
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x90]
push eax
call sym.MSVCR71D.dll_wcscpy
add esp, 8
push str.__c
mov ecx, dword [ebp - 0x90]
push ecx
call sym.MSVCR71D.dll_wcscat
add esp, 8
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x90]
push eax
call sym.MSVCR71D.dll_wcscat
add esp, 8
push 0
mov ecx, dword [ebp - 0x30]
push ecx
call sym.MSVCR71D.dll__waccess
add esp, 8
cmp eax, 0xffffffff
je 0x10246343
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x78]
push eax
push 0
push 0
push 0
push 1
push 0
push 0
mov ecx, dword [ebp - 0x90]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0xa8], eax
jmp 0x102464b0
push 0x1026b598
call sym.MSVCR71D.dll__wgetenv
add esp, 4
mov dword [ebp - 0x7c], eax
push 0x110
push str.f:_vs70builds3077_vccrtbldcrt_srcpopen.c
push 2
push 0x208
call sym.MSVCR71D.dll__malloc_dbg
add esp, 0x10
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jne 0x10246391
push 2
mov eax, dword [ebp - 0x90]
push eax
call sym.MSVCR71D.dll__free_dbg
add esp, 8
jmp 0x10246512
push 0x103
mov ecx, dword [ebp - 0xa4]
push ecx
mov edx, dword [ebp - 0x7c]
push edx
call fcn.1023eac0
add esp, 0xc
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x1024649f
mov eax, dword [ebp - 0xa4]
movzx ecx, word [eax]
test ecx, ecx
je 0x1024649f
mov edx, dword [ebp - 0xa4]
push edx
call sym.MSVCR71D.dll_wcslen
add esp, 4
mov ecx, dword [ebp - 0xa4]
lea edx, [ecx + eax*2 - 2]
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0xbc]
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x10246416
mov edx, dword [ebp - 0xbc]
movzx eax, word [edx]
cmp eax, 0x2f
je 0x10246416
push 0x1026b594
mov ecx, dword [ebp - 0xa4]
push ecx
call sym.MSVCR71D.dll_wcscat
add esp, 8
mov edx, dword [ebp - 0xa4]
push edx
call sym.MSVCR71D.dll_wcslen
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x30]
push eax
call sym.MSVCR71D.dll_wcslen
add esp, 4
add esi, eax
cmp esi, 0x104
jae 0x10246452
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0xa4]
push edx
call sym.MSVCR71D.dll_wcscat
add esp, 8
jmp 0x10246454
jmp 0x1024649f
push 0
mov eax, dword [ebp - 0xa4]
push eax
call sym.MSVCR71D.dll__waccess
add esp, 8
cmp eax, 0xffffffff
je 0x1024649a
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x78]
push edx
push 0
push 0
push 0
push 1
push 0
push 0
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0xa4]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0xa8], eax
jmp 0x1024649f
jmp 0x10246391
push 2
mov edx, dword [ebp - 0xa4]
push edx
call sym.MSVCR71D.dll__free_dbg
add esp, 8
push 2
mov eax, dword [ebp - 0x90]
push eax
call sym.MSVCR71D.dll__free_dbg
add esp, 8
mov ecx, dword [ebp - 0xb0]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0xa8], 0
je 0x102464e2
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x88], edx
jmp 0x102464e4
jmp 0x10246506
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x88]
mov dword [eax + 4], ecx
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xc0]
mov dword [edx], eax
jmp 0x10246588
mov ecx, dword [ebp - 0xac]
mov dword [ecx], 0
mov edx, dword [ebp - 0xc0]
push edx
call sym.MSVCR71D.dll_fclose
add esp, 4
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x98], 0
mov dword [ebp - 0xc0], 0
mov ecx, dword [ebp - 0x8c]
cmp dword [ebp + ecx*4 - 0x98], 0
je 0x10246562
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp + edx*4 - 0xb8]
push eax
call sym.MSVCR71D.dll__close
add esp, 4
mov ecx, dword [ebp - 0xc4]
cmp dword [ebp + ecx*4 - 0x98], 0
je 0x10246588
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp + edx*4 - 0xb8]
push eax
call sym.MSVCR71D.dll__close
add esp, 4
mov dword [ebp - 4], 0xffffffff
call fcn.10246596
jmp 0x102465a1
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret