Function at 0x426790
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc60
mov eax, dword [0x49e280]
xor eax, esp
mov dword [esp + 0xc5c], eax
push esi
push edi
push 0x40
lea eax, [esp + 0x20]
push 0
push eax
mov esi, ecx
call fcn.0045acf0
xor ecx, ecx
push 0x1fe
xor eax, eax
push ecx
lea edx, [esp + 0x76]
push edx
mov dword [esp + 0x30], 0x44
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov word [esp + 0x78], cx
call fcn.0045acf0
xor eax, eax
push 0x1fe
push eax
lea ecx, [esp + 0x682]
push ecx
mov word [esp + 0x684], ax
call fcn.0045acf0
add esp, 0x24
test esi, esi
je 0x426a4f
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x426a4f
push str.LMconfig.exe__config_IsBtn
lea edx, [esp + 0x64]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov edi, dword [sym.imp.SzUPFUtl.dll_SzUPFUtl_SetProfileStringW]
push 0x487adc
push str.Cmd_ConfigBtn_Result
push str.Panel
call edi
push esi
push str.Cmd_ConfigBtn
push str.Panel
call edi
add esp, 0x18
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x664]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.LManager
push str.Dritek
lea edx, [esp + 0x668]
push edx
lea eax, [esp + 0x6c]
push 0x487ae0
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
call fcn.0044f460
cmp eax, 6
jg 0x4268ff
lea ecx, [esp + 8]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push 0
push 0x200
push 0
push 0
push 0
lea eax, [esp + 0x80]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x426a4f
mov ecx, dword [esp + 0xc]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
call esi
mov edx, dword [esp + 8]
push edx
call esi
call fcn.00427740
pop edi
pop esi
mov ecx, dword [esp + 0xc5c]
xor ecx, esp
call fcn.00457c10
mov esp, ebp
pop ebp
ret
xor eax, eax
push 0x3fe
push eax
lea ecx, [esp + 0x86a]
push ecx
mov word [esp + 0x86c], ax
call fcn.0045acf0
xor edx, edx
push 0x3fe
push edx
lea eax, [esp + 0x276]
push eax
mov word [esp + 0x278], dx
call fcn.0045acf0
add esp, 0x18
lea ecx, [esp + 0x60]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathGetArgsW]
test eax, eax
je 0x42698c
lea ecx, [esp + 0x860]
mov esi, eax
mov eax, ecx
mov edx, 0x200
sub esi, eax
lea ecx, [ecx]
lea eax, [edx + 0x7ffffdfe]
test eax, eax
je 0x426980
movzx eax, word [esi + ecx]
test ax, ax
je 0x426980
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x426960
jmp 0x426984
test edx, edx
jne 0x426987
sub ecx, 2
xor edx, edx
mov word [ecx], dx
lea eax, [esp + 0x60]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveArgsW]
lea eax, [esp + 0x260]
mov esi, 0x4a3fd8
mov ecx, eax
mov edx, 0x200
sub esi, ecx
lea esp, [esp]
lea ecx, [edx + 0x7ffffdfe]
test ecx, ecx
je 0x4269d0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4269d0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x4269b0
jmp 0x4269d4
test edx, edx
jne 0x4269d7
sub eax, 2
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x264]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea edx, [esp + 0x260]
push edx
call dword [sym.imp.SHLWAPI.dll_PathQuoteSpacesW]
cmp word [esp + 0x860], 0
je 0x426a26
push 0x487b00
lea edi, [esp + 0x264]
call fcn.004246e0
lea eax, [esp + 0x860]
push eax
call fcn.004246e0
lea ecx, [esp + 0x260]
call fcn.0043cef0
test eax, eax
je 0x426a4f
call fcn.00427740
pop edi
pop esi
mov ecx, dword [esp + 0xc5c]
xor ecx, esp
call fcn.00457c10
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0xc64]
pop edi
pop esi
xor ecx, esp
xor eax, eax
call fcn.00457c10
mov esp, ebp
pop ebp
ret