Function at 0x4273ba
Capabilities:
Create process on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x88
push ebx
push esi
xor ebx, ebx
push edi
push 0x44
lea eax, [ebp - 0x88]
push ebx
push eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
call fcn.00408740
xor eax, eax
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x44]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
lea eax, [ebp - 0x10]
push eax
push 0x25
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], ebx
call fcn.00430914
mov edi, eax
cmp edi, ebx
jge 0x427424
push 0x449afa
jmp 0x427548
lea eax, [ebp - 8]
push eax
push 0x449ae8
push dword [ebp - 0x10]
call fcn.0043094a
mov edi, eax
cmp edi, ebx
jge 0x427445
push 0x449ac6
jmp 0x427548
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x10]
dec eax
je 0x4274de
dec eax
je 0x427464
mov edi, 0x8000ffff
push 0x449a96
jmp 0x427548
lea eax, [ebp - 0x14]
push eax
mov eax, dword [esi + 8]
push dword [eax + 0x24]
push 1
call fcn.00420820
mov edi, eax
cmp edi, ebx
jge 0x427493
mov eax, dword [esi + 8]
push dword [eax]
push 0x447cbc
push edi
call fcn.004315b6
add esp, 0xc
jmp 0x42776b
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x70]
mov eax, dword [eax]
push dword [eax + 0x18]
push dword [ebp - 0x14]
call fcn.0043094a
mov edi, eax
cmp edi, ebx
jge 0x4274ba
push 0x447c9a
jmp 0x427548
push dword [ebp - 0xc]
lea eax, [ebp - 4]
push dword [ebp - 8]
push 0x449a5a
push eax
call fcn.004300a2
mov edi, eax
add esp, 0x10
cmp edi, ebx
jge 0x427508
push 0x449a34
jmp 0x427548
mov eax, dword [esi + 8]
push dword [eax + 0x8c]
lea eax, [ebp - 4]
push dword [ebp - 8]
push 0x4499de
push eax
call fcn.004300a2
mov edi, eax
add esp, 0x10
cmp edi, ebx
jge 0x427508
push 0x4499b6
jmp 0x427548
mov eax, dword [esi + 0xc]
cmp eax, ebx
je 0x427555
cmp word [eax], bx
je 0x427555
push ebx
push 0x4499a8
lea eax, [ebp - 4]
push eax
call fcn.0042fcf8
mov edi, eax
cmp edi, ebx
jge 0x427530
push 0x449976
jmp 0x427548
push ebx
push dword [esi + 0xc]
lea eax, [ebp - 4]
push eax
call fcn.0042fcf8
mov edi, eax
cmp edi, ebx
jge 0x427555
push 0x449946
push edi
call fcn.004315b6
pop ecx
pop ecx
jmp 0x42776b
mov eax, dword [ebp - 0xc]
cmp eax, ebx
jne 0x427565
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x8c]
push dword [ebp - 4]
push eax
push dword [esi + 0x10]
call fcn.0041bca0
push eax
mov eax, dword [esi + 8]
push dword [eax]
push dword [ebp + 0xc]
call fcn.0041bff4
push eax
push 0x2000012d
push 1
call fcn.0040c35a
add esp, 0x1c
lea eax, [ebp - 0x1c]
push eax
lea ebx, [ebp - 0x24]
call fcn.00427220
mov edi, eax
xor ebx, ebx
cmp edi, ebx
jge 0x4275b5
push 0x449906
push edi
call fcn.004315b6
pop ecx
pop ecx
jmp 0x427769
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x88]
push eax
push ebx
push ebx
push 0x8000000
push ebx
push ebx
push ebx
push dword [ebp - 4]
mov dword [ebp - 0x88], 0x44
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x427629
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x4275f8
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x427603
mov edi, 0x80004005
push edi
push 0x145
push 0x44977c
call fcn.004315ca
push dword [ebp - 8]
push 0x447a7a
push edi
call fcn.004315b6
add esp, 0xc
jmp 0x427769
push 2
pop edi
push dword [ebp + 0x14]
xor ebx, ebx
lea eax, [ebp - 0x44]
inc ebx
push eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], 0x32
call dword [ebp + 0x10]
cmp eax, ebx
je 0x42764e
test eax, eax
jne 0x4276b7
lea eax, [ebp - 0x18]
push eax
push 0x1f4
push dword [ebp - 0x34]
call fcn.0042eaf8
mov edi, eax
cmp edi, 0x80070102
je 0x427629
test edi, edi
js 0x4276de
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x4276eb
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x427692
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
test edi, edi
js 0x42769d
mov edi, 0x80004005
push edi
push 0x15c
push 0x44977c
call fcn.004315ca
push 0x4498e4
jmp 0x4275a8
xor ecx, ecx
cmp eax, edi
setne cl
lea edi, [ecx - 0x7ff8f9be]
push edi
push 0x14f
push 0x44977c
call fcn.004315ca
push 0x4498ae
jmp 0x4275a8
push dword [ebp - 8]
push 0x4479f6
jmp 0x42761b
mov eax, dword [ebp - 0x18]
mov ecx, 0xbc2
cmp eax, 0x80070bc2
jne 0x4276ff
mov eax, ecx
mov dword [ebp - 0x18], eax
xor edi, edi
cmp eax, edi
je 0x427730
cmp eax, ebx
je 0x427733
cmp eax, ecx
je 0x427729
cmp eax, 0x240005
je 0x427729
cmp eax, 0x240006
je 0x427730
cmp eax, 0x80240017
je 0x427733
mov edi, 0x8000ffff
jmp 0x427769
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
jmp 0x42773d
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp + 0x18]
mov dword [eax], edi
cmp dword [ebp - 0x20], edi
je 0x427769
mov eax, dword [esi + 0x10]
cmp eax, 2
jne 0x42775d
push dword [esi + 8]
call fcn.00428268
mov edi, eax
test edi, edi
jns 0x427769
push 0x4479c0
jmp 0x4275a8
cmp eax, ebx
jne 0x427769
push dword [esi + 8]
call fcn.00428352
xor ebx, ebx
cmp dword [ebp - 0x14], ebx
je 0x427778
push dword [ebp - 0x14]
call fcn.0042ecb2
cmp dword [ebp - 0xc], ebx
je 0x427785
push dword [ebp - 0xc]
call fcn.0042ecb2
cmp dword [ebp - 0x10], ebx
je 0x427792
push dword [ebp - 0x10]
call fcn.0042ecb2
cmp dword [ebp - 8], ebx
je 0x42779f
push dword [ebp - 8]
call fcn.0042ecb2
cmp dword [ebp - 4], ebx
je 0x4277ac
push dword [ebp - 4]
call fcn.0042ecb2
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x34], ebx
je 0x4277bf
push dword [ebp - 0x34]
call esi
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x30], ebx
je 0x4277cc
push dword [ebp - 0x30]
call esi
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x1c], ebx
je 0x4277db
push 4
push dword [ebp - 0x24]
call fcn.004271b8
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x14