Function at 0x4232d6
Capabilities:
Create process on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x80
push ebx
push esi
xor ebx, ebx
push edi
push 0x44
lea eax, [ebp - 0x80]
push ebx
push eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
call fcn.00408720
xor eax, eax
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x2c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
mov dword [ebp - 0x10], ebx
push dword [eax + 0x24]
push dword [eax + 0x14]
call fcn.004207cc
mov edi, eax
cmp edi, ebx
jge 0x423346
mov eax, dword [esi + 8]
push dword [eax]
push 0x4478e6
jmp 0x423640
lea eax, [ebp - 4]
push eax
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x70]
mov eax, dword [eax]
push dword [eax + 0x18]
push dword [ebp - 0x1c]
call fcn.004307ea
mov edi, eax
cmp edi, ebx
jge 0x42336d
push 0x4478c4
jmp 0x423693
mov eax, dword [esi + 0xc]
dec eax
je 0x4233a0
dec eax
je 0x423395
sub eax, 3
je 0x42338a
mov edi, 0x8000ffff
push 0x44788c
jmp 0x423693
mov eax, dword [esi + 8]
mov ebx, dword [eax + 0x90]
jmp 0x4233a9
mov eax, dword [esi + 8]
mov ebx, dword [eax + 0x8c]
jmp 0x4233a9
mov eax, dword [esi + 8]
mov ebx, dword [eax + 0x94]
test ebx, ebx
je 0x423427
cmp word [ebx], 0
je 0x423427
push 0
lea eax, [ebp - 0x14]
push eax
push ebx
push dword [ebp + 0xc]
call fcn.00414064
mov edi, eax
test edi, edi
jns 0x4233d2
push 0x44786a
jmp 0x423693
push dword [ebp - 0x14]
lea eax, [ebp - 8]
push dword [ebp - 4]
push 0x447858
push eax
call fcn.0042ff34
mov edi, eax
add esp, 0x10
test edi, edi
js 0x423442
push 0
lea eax, [ebp - 0x18]
push eax
push ebx
push dword [ebp + 0xc]
call fcn.004167fc
mov edi, eax
test edi, edi
jns 0x42340e
push 0x44782a
jmp 0x423693
push dword [ebp - 0x18]
lea eax, [ebp - 0xc]
push dword [ebp - 4]
push 0x447858
push eax
call fcn.0042ff34
add esp, 0x10
jmp 0x42345c
push dword [ebp - 4]
mov ebx, 0x444c2e
lea eax, [ebp - 8]
push ebx
push eax
call fcn.0042ff34
mov edi, eax
add esp, 0xc
test edi, edi
jns 0x42344c
push 0x447804
jmp 0x423693
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push ebx
push eax
call fcn.0042ff34
add esp, 0xc
mov edi, eax
test edi, edi
jns 0x42346c
push 0x4477d4
jmp 0x423693
mov eax, dword [esi + 0x10]
test eax, eax
je 0x4234d2
mov ecx, dword [esi + 8]
cmp dword [ecx + 0xa0], 1
jne 0x4234d2
push eax
push 0x402edc
push dword [ebp - 8]
mov ebx, 0x4477ba
lea eax, [ebp - 8]
push ebx
push eax
call fcn.0042ff34
mov edi, eax
add esp, 0x14
test edi, edi
jns 0x4234aa
push 0x447770
jmp 0x423693
push dword [esi + 0x10]
lea eax, [ebp - 0xc]
push 0x402edc
push dword [ebp - 0xc]
push ebx
push eax
call fcn.0042ff34
mov edi, eax
add esp, 0x14
test edi, edi
jns 0x4234d2
push 0x44771c
jmp 0x423693
push dword [ebp - 0xc]
push dword [ebp - 4]
push dword [esi + 0xc]
call fcn.0041bce6
push eax
mov eax, dword [esi + 8]
push dword [eax]
push dword [ebp + 0x10]
call fcn.0041c036
push eax
push 0x2000012d
push 1
call fcn.0040c33a
mov eax, dword [esi + 8]
mov eax, dword [eax + 0xa0]
add esp, 0x1c
push 2
pop ebx
cmp eax, 1
jne 0x42353b
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.0042bf90
mov edi, eax
test edi, edi
jns 0x423614
push dword [ebp - 4]
push 0x4476ec
jmp 0x423640
cmp eax, ebx
jne 0x42356b
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.0042ba62
mov edi, eax
test edi, edi
jns 0x423614
push dword [ebp - 4]
push 0x4476ca
jmp 0x423640
lea eax, [ebp - 0x2c]
push eax
xor edi, edi
lea eax, [ebp - 0x80]
push eax
push edi
push edi
push 0x8000000
push edi
push edi
push edi
push dword [ebp - 8]
mov dword [ebp - 0x80], 0x44
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x4235d1
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
jle 0x4235aa
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
test edi, edi
js 0x4235b5
mov edi, 0x80004005
push edi
push 0x1f1
push 0x44729e
call fcn.00431468
push dword [ebp - 4]
push 0x4476a4
jmp 0x423640
xor edi, edi
push dword [ebp + 0x18]
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], 0x32
call dword [ebp + 0x14]
cmp eax, 1
je 0x4235f5
cmp eax, edi
jne 0x42364b
lea eax, [ebp - 0x10]
push eax
push 0x1f4
push dword [ebp - 0x2c]
call fcn.0042e8b6
mov edi, eax
cmp edi, 0x80070102
je 0x4235cf
test edi, edi
js 0x42366f
mov edi, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x10]
mov eax, dword [esi + 8]
call fcn.00422e90
mov edi, eax
test edi, edi
jns 0x423679
push edi
push 0x206
push 0x44729e
call fcn.00431468
push dword [ebp - 0x10]
push 0x447686
push edi
call fcn.00431454
add esp, 0xc
jmp 0x4236aa
xor ecx, ecx
cmp eax, ebx
setne cl
lea edi, [ecx - 0x7ff8f9be]
push edi
push 0x1fb
push 0x44729e
call fcn.00431468
push 0x447650
jmp 0x423693
push dword [ebp - 4]
push 0x447620
jmp 0x423640
mov eax, dword [esi + 0xc]
cmp eax, ebx
jne 0x42369d
push dword [esi + 8]
call fcn.00428026
mov edi, eax
test edi, edi
jns 0x4236aa
push 0x4475ea
push edi
call fcn.00431454
pop ecx
pop ecx
jmp 0x4236aa
cmp eax, 1
jne 0x4236aa
push dword [esi + 8]
call fcn.00428110
xor ebx, ebx
cmp dword [ebp - 0x14], ebx
je 0x4236b9
push dword [ebp - 0x14]
call fcn.0042ea70
cmp dword [ebp - 0x18], ebx
je 0x4236c6
push dword [ebp - 0x18]
call fcn.0042ea70
cmp dword [ebp - 0x1c], ebx
je 0x4236d3
push dword [ebp - 0x1c]
call fcn.0042ea70
cmp dword [ebp - 4], ebx
je 0x4236e0
push dword [ebp - 4]
call fcn.0042ea70
cmp dword [ebp - 8], ebx
je 0x4236ed
push dword [ebp - 8]
call fcn.0042ea70
cmp dword [ebp - 0xc], ebx
je 0x4236fa
push dword [ebp - 0xc]
call fcn.0042ea70
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x28], ebx
je 0x42370d
push dword [ebp - 0x28]
call esi
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x2c], ebx
je 0x423717
push dword [ebp - 0x2c]
call esi
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x18