Function at 0x425110
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x4dd094]
xor eax, ebp
mov dword [ebp - 8], eax
movss xmm2, dword [0x4deea4]
movd xmm1, edx
cvtdq2ps xmm1, xmm1
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
comiss xmm1, xmm2
movss dword [ebp - 0x24], xmm1
jb 0x425252
mov eax, dword [0x4e0c38]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x425252
movss xmm3, dword [0x4deea8]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x425252
mov eax, dword [0x4e0c3c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x425252
mov eax, dword [0x4e0c4c]
cmp byte [eax + 0x14c], 0
je 0x425252
mov eax, dword [0x4e1108]
cmp eax, 2
je 0x4251d3
mov dword [0x4e0c5c], esi
cmp esi, 3
jne 0x425245
cmp eax, 2
jne 0x42526b
mov dword [0x4e0c5c], 1
mov dword [0x4e1108], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.004092a0
call fcn.00424a20
mov ecx, dword [ebp - 0xc]
cmp ecx, 0x10
jb 0x42523e
mov edx, dword [ebp - 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425234
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425881
push ecx
push edx
call fcn.00476d74
add esp, 8
movss xmm1, dword [ebp - 0x24]
jmp 0x42526b
cmp eax, 2
je 0x42526b
mov dword [0x4e1108], esi
jmp 0x42526b
mov dword [0x4e0c5c], 0
cmp esi, 3
jne 0x42526b
mov dword [0x4e1108], 0
movss xmm2, dword [0x4deedc]
comiss xmm1, xmm2
mov ebx, dword [sym.imp.SHELL32.dll_ShellExecuteA]
jb 0x42535a
mov eax, dword [0x4e0de0]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x42535a
movss xmm3, dword [0x4deee0]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x42535a
mov eax, dword [0x4e0de4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x42535a
mov eax, dword [0x4e0c4c]
cmp byte [eax + 0x14c], 0
je 0x42535a
mov eax, dword [0x4e1140]
cmp eax, 2
je 0x425308
mov dword [0x4e0c60], esi
cmp esi, 3
jne 0x42534d
cmp eax, 2
jne 0x425373
cmp dword [0x4def44], 0x10
mov eax, 0x4def30
push 5
cmovae eax, dword [0x4def30]
push 0
push 0
push eax
push 0
push 0
mov dword [0x4e0c60], 1
mov dword [0x4e1140], 1
call ebx
movss xmm1, dword [ebp - 0x24]
jmp 0x425373
cmp eax, 2
je 0x425373
mov dword [0x4e1140], esi
jmp 0x425373
mov dword [0x4e0c60], 0
cmp esi, 3
jne 0x425373
mov dword [0x4e1140], 0
movss xmm2, dword [0x4def6c]
comiss xmm1, xmm2
jb 0x425420
mov eax, dword [0x4e0e68]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x425420
movss xmm3, dword [0x4def70]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x425420
mov eax, dword [0x4e0e6c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x425420
mov eax, dword [0x4e0c4c]
cmp byte [eax + 0x14c], 0
je 0x425420
mov eax, dword [0x4e1118]
cmp eax, 2
je 0x425402
mov dword [0x4e0c64], esi
cmp esi, 3
jne 0x425413
call fcn.00424c50
movss xmm1, dword [ebp - 0x24]
jmp 0x425439
cmp eax, 2
je 0x425439
mov dword [0x4e1118], esi
jmp 0x425439
mov dword [0x4e0c64], 0
cmp esi, 3
jne 0x425439
mov dword [0x4e1118], 0
movss xmm2, dword [0x4def24]
comiss xmm1, xmm2
jb 0x4254e0
mov eax, dword [0x4e0e28]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x4254e0
movss xmm3, dword [0x4def28]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x4254e0
mov eax, dword [0x4e0e2c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x4254e0
mov eax, dword [0x4e1144]
cmp eax, 2
je 0x4254ba
mov dword [0x4e0c68], esi
cmp esi, 3
jne 0x4254d3
cmp eax, 2
jne 0x4254f9
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
movss xmm1, dword [ebp - 0x24]
jmp 0x4254f9
cmp eax, 2
je 0x4254f9
mov dword [0x4e1144], esi
jmp 0x4254f9
mov dword [0x4e0c68], 0
cmp esi, 3
jne 0x4254f9
mov dword [0x4e1144], 0
movss xmm2, dword [0x4deeb0]
comiss xmm1, xmm2
jb 0x425636
mov eax, dword [0x4e0d7c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x425636
movss xmm3, dword [0x4deeb4]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x425636
mov eax, dword [0x4e0d80]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x425636
mov eax, dword [0x4e0c4c]
cmp byte [eax + 0x14c], 0
je 0x425636
mov eax, dword [0x4e1138]
cmp eax, 2
je 0x425598
mov dword [0x4e0c6c], esi
cmp esi, 3
jne 0x425629
cmp eax, 2
jne 0x42564f
mov dword [0x4e0c6c], 1
mov dword [0x4e1138], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.004092a0
cmp dword [0x4def9c], 0x10
mov eax, 0x4def88
push 5
cmovae eax, dword [0x4def88]
push 0
push 0
push eax
push 0
push 0
call ebx
mov ecx, dword [ebp - 0xc]
cmp ecx, 0x10
jb 0x425622
mov edx, dword [ebp - 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425618
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425881
push ecx
push edx
call fcn.00476d74
add esp, 8
movss xmm1, dword [ebp - 0x24]
jmp 0x42564f
cmp eax, 2
je 0x42564f
mov dword [0x4e1138], esi
jmp 0x42564f
mov dword [0x4e0c6c], 0
cmp esi, 3
jne 0x42564f
mov dword [0x4e1138], 0
movss xmm2, dword [0x4deee8]
comiss xmm1, xmm2
jb 0x425738
mov eax, dword [0x4e0e08]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x425738
movss xmm3, dword [0x4deeec]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x425738
mov eax, dword [0x4e0e0c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x425738
mov eax, dword [0x4e0c4c]
cmp byte [eax + 0x14c], 0
je 0x425738
mov eax, dword [0x4e1114]
cmp eax, 2
je 0x4256e6
mov dword [0x4e0c70], esi
cmp esi, 3
jne 0x42572b
cmp eax, 2
jne 0x425751
cmp dword [0x4def20], 0x10
mov eax, 0x4def0c
push 5
cmovae eax, dword [0x4def0c]
push 0
push 0
push eax
push 0
push 0
mov dword [0x4e0c70], 1
mov dword [0x4e1114], 1
call ebx
movss xmm1, dword [ebp - 0x24]
jmp 0x425751
cmp eax, 2
je 0x425751
mov dword [0x4e1114], esi
jmp 0x425751
mov dword [0x4e0c70], 0
cmp esi, 3
jne 0x425751
mov dword [0x4e1114], 0
movss xmm2, dword [0x4def60]
comiss xmm1, xmm2
jb 0x425857
mov eax, dword [0x4e0cb4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x425857
movss xmm2, dword [0x4def64]
movd xmm1, edi
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm2
jb 0x425857
mov eax, dword [0x4e0cb8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d7290]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x425857
mov eax, dword [0x4e0c4c]
cmp byte [eax + 0x14c], 0
je 0x425857
mov eax, dword [0x4e1180]
cmp eax, 2
je 0x4257ec
mov dword [0x4e0c74], esi
cmp esi, 3
jne 0x42583b
cmp eax, 2
jne 0x425870
cmp dword [0x4def08], 0x10
mov eax, 0x4deef4
push 5
cmovae eax, dword [0x4deef4]
push 0
push 0
push eax
push 0
push 0
mov dword [0x4e0c74], 1
mov dword [0x4e1180], 1
call ebx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00476d2c
mov esp, ebp
pop ebp
ret
cmp eax, 2
je 0x425870
mov dword [0x4e1180], esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00476d2c
mov esp, ebp
pop ebp
ret
mov dword [0x4e0c74], 0
cmp esi, 3
jne 0x425870
mov dword [0x4e1180], 0
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00476d2c
mov esp, ebp
pop ebp
ret
call fcn.0047ebc0
int3