Function at 0x1007b2ce
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov byte [ebp - 1], bl
test edi, edi
je 0x1007b2fa
cmp edi, 1
je 0x1007b2fa
jle 0x1007b302
cmp edi, 3
jle 0x1007b2fa
cmp edi, 4
jne 0x1007b302
mov byte [ebp - 1], 1
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x14], eax
jmp 0x1007b32f
call sym.MSVCR110.dll___doserrno
mov dword [eax], ebx
call sym.MSVCR110.dll__errno
mov dword [eax], 0x16
call sym.MSVCR110.dll__invalid_parameter_noinfo
or eax, 0xffffffff
jmp 0x1007b4db
inc eax
cmp byte [eax], bl
jne 0x1007b321
cmp byte [eax + 1], bl
je 0x1007b32f
mov byte [eax], 0x20
inc eax
cmp byte [eax], bl
jne 0x1007b321
push esi
push 0x44
pop esi
push esi
lea eax, [ebp - 0x6c]
push ebx
push eax
call sym.MSVCR110.dll_memset
mov dword [ebp - 0x6c], esi
mov esi, dword [0x100c8d4c]
add esp, 0xc
test esi, esi
je 0x1007b375
lea edx, [esi - 1]
mov eax, edx
sar eax, 5
mov ecx, edx
mov eax, dword [eax*4 + sym.MSVCR110.dll___pioinfo]
and ecx, 0x1f
shl ecx, 6
cmp byte [eax + ecx + 4], bl
jne 0x1007b373
dec edx
dec esi
jne 0x1007b355
test esi, esi
js 0x1007b4cc
cmp esi, 0x3332
jae 0x1007b4cc
mov eax, esi
imul eax, eax, 5
add eax, 4
mov word [ebp - 0x3a], ax
movzx eax, ax
push 1
push eax
call sym.MSVCR110.dll__calloc_crt
pop ecx
pop ecx
mov dword [ebp - 0x38], eax
test eax, eax
je 0x1007b4cc
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
mov edx, ebx
lea ecx, [eax + 4]
mov dword [ebp - 0x10], ecx
lea ecx, [eax + 4]
add ecx, esi
mov dword [ebp - 8], ecx
test esi, esi
jle 0x1007b409
mov edi, dword [ebp - 0x10]
mov ecx, edx
and ecx, 0x1f
mov eax, edx
sar eax, 5
shl ecx, 6
add ecx, dword [eax*4 + sym.MSVCR110.dll___pioinfo]
mov al, byte [ecx + 4]
test al, 0x10
jne 0x1007b3ef
mov byte [edi], al
mov eax, dword [ecx]
mov ecx, dword [ebp - 8]
mov dword [ecx], eax
mov eax, ecx
jmp 0x1007b3f7
mov eax, dword [ebp - 8]
mov byte [edi], bl
or dword [eax], 0xffffffff
inc edx
add eax, 4
inc edi
mov dword [ebp - 8], eax
cmp edx, esi
jl 0x1007b3c7
mov eax, dword [ebp - 0x38]
mov edi, dword [ebp + 8]
cmp byte [ebp - 1], bl
je 0x1007b43f
lea edx, [eax + 4]
add eax, 4
mov ecx, ebx
add eax, esi
mov dword [ebp + 8], esi
cmp esi, 3
jl 0x1007b427
mov dword [ebp + 8], 3
cmp ecx, dword [ebp + 8]
jge 0x1007b438
mov byte [edx], bl
or dword [eax], 0xffffffff
inc ecx
inc edx
add eax, 4
jmp 0x1007b418
mov dword [ebp - 0xc], 8
call sym.MSVCR110.dll___doserrno
mov dword [eax], ebx
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x6c]
push eax
push ebx
push dword [ebp + 0x14]
push dword [ebp - 0xc]
push 1
push ebx
push ebx
push dword [ebp - 0x14]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x38]
mov dword [ebp + 8], eax
call sym.MSVCR110.dll_free
pop ecx
test esi, esi
jne 0x1007b488
push dword [ebp + 8]
call sym.MSVCR110.dll__dosmaperr
pop ecx
jmp 0x1007b4d7
cmp edi, 2
je 0x1007b4df
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x1007b4b4
push 0xffffffffffffffff
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ebx, dword [ebp - 0x18]
jmp 0x1007b4b9
cmp edi, 4
jne 0x1007b4c0
push dword [ebp - 0x28]
call esi
jmp 0x1007b4c3
mov ebx, dword [ebp - 0x28]
push dword [ebp - 0x24]
call esi
mov eax, ebx
jmp 0x1007b4da
call sym.MSVCR110.dll__errno
mov dword [eax], 0xc
or eax, 0xffffffff
pop esi
pop edi
pop ebx
leave
ret
push ebx
call sym.MSVCR110.dll__exit
int3