Function at 0x4316d0
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46a2e9
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x220
mov eax, dword [0x49f080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xe8], ecx
mov eax, dword [ebx + 0x10]
xorps xmm0, xmm0
mov edx, dword [ebx + 8]
mov ecx, 0x491264
mov dword [ebp - 0xc0], 0
mov esi, 0x496158
push edx
cmp byte [eax], 0
movlpd qword [ebp - 0xa4], xmm0
cmove esi, ecx
movlpd qword [ebp - 0x9c], xmm0
lea ecx, [ebp - 0x178]
movlpd qword [ebp - 0x94], xmm0
movlpd qword [ebp - 0x8c], xmm0
movlpd qword [ebp - 0x84], xmm0
movlpd qword [ebp - 0x7c], xmm0
movlpd qword [ebp - 0x74], xmm0
movlpd qword [ebp - 0x6c], xmm0
mov dword [ebp - 0xa8], 0x44
movups xmmword [ebp - 0xb8], xmm0
mov dword [ebp - 0xc8], esi
call fcn.0040ba80
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebx + 0xc]
lea edi, [ebp - 0x16]
mov dword [ebp - 4], 0
mov ecx, dword [ecx]
nop dword [eax]
mov eax, 0xcccccccd
sub edi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [edi], cx
mov ecx, edx
test ecx, ecx
jne 0x4317b0
lea eax, [ebp - 0x16]
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xd0], edx
xorps xmm0, xmm0
mov dword [ebp - 0xcc], edx
movups xmmword [ebp - 0xe0], xmm0
cmp edi, eax
jne 0x431811
xor eax, eax
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
jmp 0x4318c6
lea esi, [ebp - 0x16]
sub esi, edi
sar esi, 1
cmp esi, 0x7ffffffe
ja 0x431ec4
cmp esi, 7
ja 0x431858
mov dword [ebp - 0xd0], esi
lea eax, [ebp - 0xe0]
add esi, esi
mov dword [ebp - 0xcc], 7
push esi
push edi
push eax
call fcn.00444f50
add esp, 0xc
xor eax, eax
mov word [ebp + esi - 0xe0], ax
jmp 0x4318c0
mov eax, esi
or eax, 7
cmp eax, 0x7ffffffe
jbe 0x43186b
mov eax, 0x7ffffffe
jmp 0x431875
mov ecx, 0xa
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0xc0], eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.0040b890
mov ecx, dword [ebp - 0xc0]
mov edi, eax
mov dword [ebp - 0xd0], esi
add esi, esi
push esi
push dword [ebp - 0xe4]
mov dword [ebp - 0xe0], edi
push edi
mov dword [ebp - 0xcc], ecx
call fcn.00444f50
add esp, 0x14
xor eax, eax
mov word [esi + edi], ax
mov esi, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xe8]
mov eax, 0x7ffffffe
add ecx, 0x10
mov byte [ebp - 4], 1
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 4
jb 0x431ec9
cmp dword [ecx + 0x14], 7
jbe 0x4318ee
mov ecx, dword [ecx]
push 4
push 0x49616c
push edx
push ecx
push ecx
push dword [ebp - 0x44]
lea ecx, [ebp - 0x100]
call fcn.0041af60
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x100]
push eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x130]
call fcn.0041adb0
push 0x496164
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x160]
call fcn.004320a0
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x118]
push dword [ebp - 0xc4]
push eax
push dword [ebp - 0x44]
call fcn.0041adb0
mov dword [ebp - 0xc0], 0x1f
push 0x496160
lea edx, [ebp - 0x118]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x148]
call fcn.004320a0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5c]
call fcn.004320a0
add esp, 4
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x134]
cmp ecx, 7
jbe 0x4319d9
mov edx, dword [ebp - 0x148]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4319cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431ece
push ecx
push edx
call fcn.00443876
add esp, 8
xor eax, eax
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 7
mov word [ebp - 0x148], ax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x104]
cmp ecx, 7
jbe 0x431a3a
mov edx, dword [ebp - 0x118]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x431a30
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431ece
push ecx
push edx
call fcn.00443876
add esp, 8
xor eax, eax
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 7
mov word [ebp - 0x118], ax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x14c]
cmp ecx, 7
jbe 0x431a9b
mov edx, dword [ebp - 0x160]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x431a91
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431ece
push ecx
push edx
call fcn.00443876
add esp, 8
xor eax, eax
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 7
mov word [ebp - 0x160], ax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x11c]
cmp ecx, 7
jbe 0x431afc
mov edx, dword [ebp - 0x130]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x431af2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431ece
push ecx
push edx
call fcn.00443876
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xec]
cmp ecx, 7
jbe 0x431b5d
mov edx, dword [ebp - 0x100]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x431b53
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431ece
push ecx
push edx
call fcn.00443876
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xcc]
cmp ecx, 7
jbe 0x431ba1
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x431b97
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431ece
push ecx
push edx
call fcn.00443876
add esp, 8
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x164]
cmp ecx, 7
jbe 0x431be5
mov edx, dword [ebp - 0x178]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x431bdb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431ece
push ecx
push edx
call fcn.00443876
add esp, 8
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x168], 0
push ecx
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x164], 7
push ecx
push 0
push 0
push 0
xor eax, eax
cmp dword [ebp - 0x48], 7
push 0
mov word [ebp - 0x178], ax
lea eax, [ebp - 0x5c]
cmova eax, dword [ebp - 0x5c]
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x431d2e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x1a
push str.CreateProcess___failed:_
lea edx, [ebp - 0xc4]
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0x100]
call fcn.00432170
mov esi, eax
push 0xb8
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x10
push 0
push eax
call fcn.00445500
add esp, 0x14
lea ecx, [ebp - 0x230]
push 0x49fb3c
call fcn.00408b20
cmp dword [esi + 0x14], 7
mov eax, dword [esi + 0x10]
mov dword [ebp - 0xc0], 0x5f
jbe 0x431c9d
mov esi, dword [esi]
push eax
mov edx, esi
lea ecx, [ebp - 0x220]
call fcn.00422530
add esp, 4
lea eax, [ebp - 0x220]
push eax
call fcn.00417ed0
add esp, 4
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x180]
test ecx, ecx
je 0x431cd7
lea eax, [ebp - 0x230]
push eax
call fcn.00417870
lea ecx, [ebp - 0x230]
call fcn.00408c60
mov ecx, dword [ebp - 0xec]
cmp ecx, 7
jbe 0x431d22
mov edx, dword [ebp - 0x100]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x431d18
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431ed3
push ecx
push edx
call fcn.00443876
add esp, 8
mov byte [ebp - 0xb9], 0
jmp 0x431e68
push 0xffffffffffffffff
push dword [ebp - 0xb8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x44]
mov byte [ebp - 0xb9], 0
push eax
push dword [ebp - 0xb8]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x431e47
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x1f
push str.GetExitCodeProcess___failed:_
lea edx, [ebp - 0xc4]
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0x100]
call fcn.00432170
mov esi, eax
push 0xb8
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x13
push 0
push eax
call fcn.00445500
add esp, 0x14
lea ecx, [ebp - 0x230]
push 0x49fb3c
call fcn.00408b20
cmp dword [esi + 0x14], 7
mov eax, dword [esi + 0x10]
mov dword [ebp - 0xc0], 0x11f
jbe 0x431dc0
mov esi, dword [esi]
push eax
mov edx, esi
lea ecx, [ebp - 0x220]
call fcn.00422530
add esp, 4
lea eax, [ebp - 0x220]
push eax
call fcn.00417ed0
add esp, 4
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x180]
test ecx, ecx
je 0x431dfa
lea eax, [ebp - 0x230]
push eax
call fcn.00417870
lea ecx, [ebp - 0x230]
call fcn.00408c60
mov ecx, dword [ebp - 0xec]
cmp ecx, 7
jbe 0x431e52
mov edx, dword [ebp - 0x100]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x431e3b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431ed8
push ecx
push edx
call fcn.00443876
add esp, 8
jmp 0x431e52
cmp dword [ebp - 0x44], 0
sete byte [ebp - 0xb9]
push dword [ebp - 0xb8]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0xb4]
call esi
mov ecx, dword [ebp - 0x48]
cmp ecx, 7
jbe 0x431e9e
mov edx, dword [ebp - 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x431e94
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431edd
push ecx
push edx
call fcn.00443876
add esp, 8
mov al, byte [ebp - 0xb9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004435e2
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc
call fcn.00403570
call fcn.00403570
call fcn.004483fa
call fcn.004483fa
call fcn.004483fa
call fcn.004483fa
int3