Function at 0x4252b0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4518ad
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x47a42c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword fs:[0x2c]
mov ecx, dword [0x47c6a8]
mov esi, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x23c], esi
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x47c324]
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x234], 0
cmp eax, dword [ecx + 4]
jg 0x425760
call fcn.0040c210
test eax, eax
je 0x425711
cmp dword [0x47c31c], 0
je 0x425344
cmp dword [0x47c320], 0
jne 0x425586
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.0040c210
test eax, eax
je 0x425579
mov esi, 3
nop
lea eax, [ebp - 0x230]
push eax
push str.FCHelper.ProcessHelper
call dword [sym.imp.ole32.dll_CLSIDFromProgID]
test eax, eax
js 0x425391
push 0x47c320
push 0x4601e0
push 0x17
push 0
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, 0x800401f0
jne 0x4253a5
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
jmp 0x42553f
cmp eax, 0x80040154
je 0x4253b7
cmp eax, 0x800401f3
jne 0x42553f
call fcn.0040c210
test eax, eax
je 0x42553f
push 0x44
lea eax, [ebp - 0x29c]
push 0
push eax
call fcn.0042b800
push 0x20a
lea eax, [ebp - 0x220]
xorps xmm0, xmm0
push 0
push eax
movups xmmword [ebp - 0x254], xmm0
call fcn.0042b800
push edi
push str.__sFCHelper64.exe___regserver
lea eax, [ebp - 0x220]
push 0x104
push eax
call fcn.0041a9e0
push 0
lea eax, [ebp - 0x220]
push eax
push 1
push 0xd66
push str.c:jenkins_fct1_svn_forticlienthsinstallationwix_fct_enterprise_fcsetupexe_setupexe_setupexe.cpp
call fcn.00418a50
add esp, 0x3c
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x29c]
push eax
push 0
push 0
push 8
push 0
push 0
push 0
lea eax, [ebp - 0x220]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x42547d
push 0x7d0
push dword [ebp - 0x254]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x254]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x250]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x425498
push 0
push str.create_FCHelper64.exe_process_failed
push 1
push 0xd6f
push 0x460280
call fcn.00418730
add esp, 0x14
push edi
push str.__sFCFileSystemHelper64.exe___regserver
lea eax, [ebp - 0x220]
push 0x104
push eax
call fcn.0041a9e0
push 0
lea eax, [ebp - 0x220]
push eax
push 1
push 0xd72
push str.c:jenkins_fct1_svn_forticlienthsinstallationwix_fct_enterprise_fcsetupexe_setupexe_setupexe.cpp
call fcn.00418a50
add esp, 0x24
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x29c]
push eax
push 0
push 0
push 8
push 0
push 0
push 0
lea eax, [ebp - 0x220]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x425524
push 0x7d0
push dword [ebp - 0x254]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x254]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x250]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x42553f
push 0
push str.create_FCFileSystemHelper64.exe_process_failed
push 1
push 0xd7b
push 0x460280
call fcn.00418730
add esp, 0x14
mov eax, dword [0x47c320]
test eax, eax
jne 0x425567
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x47c320]
test eax, eax
jne 0x425567
dec esi
test esi, esi
jg 0x425360
jmp 0x425711
mov esi, dword [ebp - 0x23c]
mov dword [0x47c31c], 1
jmp 0x42557e
mov eax, dword [0x47c320]
test eax, eax
je 0x425711
push 0xc
call fcn.00428a38
mov edi, eax
add esp, 4
mov dword [ebp - 0x240], edi
mov dword [ebp - 4], 0
test edi, edi
je 0x4255c8
push esi
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [edi], eax
test eax, eax
jne 0x4255ca
test esi, esi
jne 0x425796
jmp 0x4255ca
xor edi, edi
mov dword [ebp - 0x240], edi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x258], edi
test edi, edi
je 0x4257a0
mov eax, dword [0x47c320]
lea ecx, [ebp - 0x244]
push ecx
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x238], 0
push ecx
push dword [edi]
mov esi, dword [eax]
push dword [ebp + 8]
mov dword [ebp - 4], 1
push eax
mov esi, dword [esi + 0x1c]
mov ecx, esi
mov byte [ebp - 4], 2
call dword [0x45343c]
call esi
push dword [ebp - 0x238]
mov esi, eax
push dword [ebp - 0x244]
push str.CreateProcessInSession_result_nRet___d_dwPid___d
push 1
push 0xdaf
push 0x460280
call fcn.00418730
add esp, 0x18
mov dword [ebp - 4], 1
test esi, esi
je 0x425666
cmp esi, 0x800401f0
jne 0x4256ae
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
jmp 0x4256ae
push dword [ebp - 0x238]
push 0
push 0x100410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push eax
push str.OpenProcess_result_hProc___d
push 1
push 0xdc0
push 0x460280
mov dword [ebp - 0x234], eax
call fcn.00418730
add esp, 0x14
jmp 0x4256d1
mov eax, dword [0x47c320]
test eax, eax
je 0x4256d1
mov dword [0x47c320], 0
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x45343c]
call esi
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
dec eax
jne 0x425711
mov eax, dword [edi]
test eax, eax
je 0x4256ef
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [edi], 0
mov eax, dword [edi + 4]
test eax, eax
je 0x425706
push eax
call fcn.00428a7f
add esp, 4
mov dword [edi + 4], 0
push 0xc
push edi
call fcn.00428a68
add esp, 8
mov ecx, dword [ebp - 0x234]
test ecx, ecx
jne 0x425742
push ecx
lea eax, [ebp - 0x234]
push eax
push ecx
push dword [ebp - 0x23c]
push dword [ebp + 8]
call fcn.004156b0
mov ecx, dword [ebp - 0x234]
xor edx, edx
add esp, 0x14
test eax, eax
cmovne ecx, edx
mov eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00428a27
mov esp, ebp
pop ebp
ret
push 0x47c324
call fcn.004292d6
add esp, 4
cmp dword [0x47c324], 0xffffffff
jne 0x425321
push 0x451f60
call fcn.004290ca
push 0x47c324
call fcn.0042928c
add esp, 8
jmp 0x425321
push 0x8007000e
call fcn.0042b110
push 0x8007000e
call fcn.0042b110
int3