Function at 0x4084c0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42d14b
mov eax, dword fs:[0]
push eax
sub esp, 0xf0
mov eax, dword [0x43e020]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
call fcn.00402f50
mov ecx, edi
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408510
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x28]
call fcn.0040c880
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
sub esp, 0x18
xorps xmm0, xmm0
mov esi, esp
mov dl, 0x20
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0xe
mov dword [esi + 0x14], 0xf
movq xmm0, qword [str.Auto_Selecting]
movq qword [esi], xmm0
mov eax, dword [0x43a394]
mov dword [esi + 8], eax
mov ax, word [0x43a398]
mov word [esi + 0xc], ax
mov byte [esi + 0xe], 0
call fcn.00403520
mov dword [ebp - 4], 0xffffffff
add esp, 0x18
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x4085ae
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4085a4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4085a4
call fcn.00417c53
push ecx
push edx
call fcn.0041059a
add esp, 8
call fcn.00402f50
mov ecx, dword [0x43ea9c]
mov eax, 0x7fffffff
sub eax, ecx
cmp eax, 9
jae 0x4085ca
call fcn.00401780
cmp dword [0x43eaa0], 0x10
mov eax, 0x43ea8c
push 9
cmovae eax, dword [0x43ea8c]
push str.Binaries_
push ecx
push eax
push ecx
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x28]
call fcn.0040db30
push edi
lea edx, [ebp - 0x28]
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.0040bf80
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 2
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 4
jb 0x40863d
lea eax, [edx + 4]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0x10
jb 0x40862f
mov eax, dword [ecx]
mov dword [eax + edx], 0x6578652e
mov byte [eax + edx + 4], 0
jmp 0x40865a
push 4
push str..exe
mov byte [ebp - 0xa8], 0
push dword [ebp - 0xa8]
push 4
call fcn.0040d1a0
mov ecx, eax
mov dword [ebp - 0x30], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x4086c5
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4086bb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408701
push ecx
push edx
call fcn.0041059a
add esp, 8
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x408710
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x408706
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x408706
call fcn.00417c53
push ecx
push edx
call fcn.0041059a
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14], 0xf
mov ecx, esp
mov byte [ebp - 0x28], 0
push eax
call fcn.00409ec0
mov cl, 0x20
call fcn.00403010
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 1
mov dword [ecx + 0x14], 0xf
mov al, byte [0x4395f0]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov cl, 0x20
call fcn.00403010
mov esi, esp
xorps xmm0, xmm0
push 0x20
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.00410204
mov edx, eax
mov dword [esi + 0x10], 0x17
mov dword [esi], edx
add esp, 4
mov dword [esi + 0x14], 0x1f
movups xmm0, xmmword [str.Launching_y_cruncher...]
movups xmmword [edx], xmm0
mov ecx, dword [0x43a3c0]
mov dword [edx + 0x10], ecx
mov cx, word [0x43a3c4]
mov word [edx + 0x14], cx
mov cl, 0x59
mov al, byte [0x43a3c6]
mov byte [edx + 0x16], al
mov byte [edx + 0x17], 0
call fcn.00403010
mov esi, esp
xorps xmm0, xmm0
push 0x50
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.00410204
mov ecx, eax
mov dword [esi + 0x10], 0x41
mov dword [esi], ecx
add esp, 4
mov dword [esi + 0x14], 0x4f
movups xmm0, xmmword [str._n]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x43a3d8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x43a3e8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x43a3f8]
movups xmmword [ecx + 0x30], xmm0
mov al, byte [0x43a408]
mov byte [ecx + 0x40], al
mov byte [ecx + 0x41], 0
mov cl, 0x67
call fcn.00403010
add esp, 0x18
mov cl, 0x77
call fcn.00402d40
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0x44
movlpd qword [ebp - 0xf8], xmm0
movlpd qword [ebp - 0xf0], xmm0
movlpd qword [ebp - 0xe8], xmm0
movlpd qword [ebp - 0xe0], xmm0
movlpd qword [ebp - 0xd8], xmm0
movlpd qword [ebp - 0xd0], xmm0
movlpd qword [ebp - 0xc8], xmm0
movlpd qword [ebp - 0xc0], xmm0
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0xa0]
movups xmmword [ebp - 0xb8], xmm0
call fcn.00408260
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00403ef0
mov esi, eax
lea edx, [ebp - 0x40]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70]
call fcn.00403ef0
cmp dword [esi + 0x14], 8
jb 0x4088c8
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x4088d0
mov eax, dword [eax]
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0xfc]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov ecx, dword [ebp - 0x5c]
test eax, eax
sete byte [ebp - 0xa1]
cmp ecx, 8
jb 0x408935
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40892b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4089cd
push ecx
push edx
call fcn.0041059a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp ecx, 8
jb 0x408986
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40897c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4089cd
push ecx
push edx
call fcn.0041059a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
cmp ecx, 0x10
jb 0x4089dc
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4089d2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4089d2
call fcn.00417c53
push ecx
push edx
call fcn.0041059a
add esp, 8
cmp byte [ebp - 0xa1], 0
je 0x408a1e
mov byte [ebp - 0xa1], 0x20
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push eax
sub esp, 0x18
mov ecx, esp
push str.Unable_to_start_y_cruncher
call fcn.00409e80
mov cl, byte [ebp - 0xa1]
call fcn.00403630
add esp, 0x20
call fcn.00402c80
push 1
call fcn.00414d62
push 0xffffffffffffffff
push dword [ebp - 0xb8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, eax
test esi, esi
je 0x408a4b
sub esp, 0x18
mov ecx, esp
push 0x4395f0
call fcn.00409e80
mov cl, 0x20
call fcn.00403010
add esp, 0x18
call fcn.004046b0
mov ecx, eax
call fcn.00409a10
cmp eax, 1
ja 0x408a6a
call fcn.004046c0
test al, al
jne 0x408a6a
call fcn.00402c80
push esi
call fcn.00414d62
int3