Function at 0x418300
Capabilities:
Create process on windows

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0x180
push ebx
push ebp
xor ebp, ebp
push esi
cmp eax, ebp
push edi
jne 0x418337
xor edx, edx
xor ebx, ebx
xor edi, edi
xor eax, eax
mov dword [esp + 0x24], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x14], ebp
xor esi, esi
jmp 0x418446
mov ecx, dword [esp + 0x198]
cmp ecx, ebp
mov dword [esp + 0x24], ecx
jne 0x418365
xor edx, edx
xor ebx, ebx
xor edi, edi
xor eax, eax
mov dword [esp + 0x34], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x14], ebp
xor esi, esi
jmp 0x418446
mov edx, dword [esp + 0x19c]
cmp edx, ebp
mov dword [esp + 0x34], edx
jne 0x41838f
xor edx, edx
xor ebx, ebx
xor edi, edi
xor eax, eax
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x14], ebp
xor esi, esi
jmp 0x418446
mov esi, dword [esp + 0x1a0]
cmp esi, ebp
mov dword [esp + 0x1c], esi
jne 0x4183b5
xor edx, edx
xor ebx, ebx
xor edi, edi
xor eax, eax
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x14], ebp
xor esi, esi
jmp 0x418446
mov esi, dword [esp + 0x1a4]
cmp esi, ebp
mov dword [esp + 0x2c], esi
jne 0x4183d4
xor edx, edx
xor ebx, ebx
xor edi, edi
xor eax, eax
mov dword [esp + 0x14], ebp
xor esi, esi
jmp 0x418446
mov esi, dword [esp + 0x1a8]
cmp esi, ebp
mov dword [esp + 0x14], esi
jne 0x4183ef
xor edx, edx
xor ebx, ebx
xor edi, edi
xor eax, eax
xor esi, esi
jmp 0x418446
mov esi, dword [esp + 0x1ac]
cmp esi, ebp
mov edx, esi
jne 0x418406
xor ebx, ebx
xor edi, edi
xor eax, eax
xor esi, esi
jmp 0x418446
mov esi, dword [esp + 0x1b0]
cmp esi, ebp
mov ebx, esi
jne 0x41841b
xor edi, edi
xor eax, eax
xor esi, esi
jmp 0x418446
mov esi, dword [esp + 0x1b4]
cmp esi, ebp
mov edi, esi
jne 0x41842e
xor eax, eax
xor esi, esi
jmp 0x418446
mov esi, dword [esp + 0x1b8]
cmp esi, ebp
mov eax, esi
jne 0x41843f
xor esi, esi
jmp 0x418446
mov esi, dword [esp + 0x1bc]
cmp esi, ebp
mov dword [esp + 0x48], 0x44
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
mov dword [esp + 0x54], ebp
mov dword [esp + 0x74], 1
mov word [esp + 0x78], 2
mov word [esp + 0x7a], bp
mov dword [esp + 0x7c], ebp
je 0x418481
mov dword [esp + 0x30], esi
mov ecx, 0x446718
jmp 0x41848a
mov ecx, 0x446718
mov dword [esp + 0x30], ecx
cmp eax, ebp
mov dword [esp + 0x10], eax
jne 0x418496
mov dword [esp + 0x10], ecx
cmp edi, ebp
mov dword [esp + 0x18], edi
jne 0x4184a2
mov dword [esp + 0x18], ecx
cmp ebx, ebp
mov dword [esp + 0x20], ebx
jne 0x4184ae
mov dword [esp + 0x20], ecx
cmp edx, ebp
mov dword [esp + 0x28], edx
jne 0x4184ba
mov dword [esp + 0x28], ecx
mov esi, dword [esp + 0x14]
cmp esi, ebp
jne 0x4184c4
mov esi, ecx
mov ebx, dword [esp + 0x2c]
cmp ebx, ebp
jne 0x4184ce
mov ebx, ecx
mov edi, dword [esp + 0x1c]
cmp edi, ebp
jne 0x4184d8
mov edi, ecx
mov edx, dword [esp + 0x34]
cmp edx, ebp
jne 0x4184e2
mov edx, ecx
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x4184ec
mov ecx, eax
mov eax, dword [esp + 0x194]
cmp eax, ebp
jne 0x4184fc
mov eax, 0x446718
mov ebp, dword [esp + 0x30]
push ebp
mov ebp, dword [esp + 0x14]
push ebp
mov ebp, dword [esp + 0x20]
push ebp
mov ebp, dword [esp + 0x2c]
push ebp
mov ebp, dword [esp + 0x38]
push ebp
push esi
push ebx
push edi
push edx
push ecx
push eax
lea eax, [esp + 0xb8]
push str._s__s__s__s__s__s__s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x34
lea ecx, [esp + 0x38]
lea edx, [esp + 0x48]
lea eax, [esp + 0x8c]
push ecx
push edx
push 0
push 0
push 0x8000028
push 0
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x418572
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x180
ret
mov ecx, dword [esp + 0x38]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
call esi
mov edx, dword [esp + 0x3c]
push edx
call esi
mov eax, dword [esp + 0x40]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret