Function at 0x443880
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46beab
mov eax, dword fs:[0]
push eax
mov eax, 0x100a8
call fcn.00447bf0
mov eax, dword [0x4a3a10]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [ebp + 8]
mov eax, SysReAllocString
mov esi, dword [ebp + 0xc]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x443aff
cmp dword [ecx + 0x14], 0x10
mov eax, ecx
jb 0x4438d3
mov eax, dword [ecx]
push 1
push 0x4701d0
push edx
push eax
push ecx
push dword [ebp - 0x10060]
lea ecx, [ebp - 0x10058]
call fcn.00420540
cmp dword [esi + 0x14], 0x10
mov eax, dword [esi + 0x10]
mov dword [ebp - 4], 0
jb 0x443900
mov esi, dword [esi]
push eax
push esi
lea ecx, [ebp - 0x10058]
call fcn.0041e640
mov dword [ebp - 0x10018], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x10028], xmm0
mov dword [ebp - 0x10014], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x10028], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x10018], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x10028]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x10040]
push eax
call fcn.0041fb60
mov ecx, dword [ebp - 0x10014]
add esp, 8
cmp ecx, 0x10
jb 0x4439a7
mov edx, dword [ebp - 0x10028]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44399d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443b04
push ecx
push edx
call fcn.0044781c
add esp, 8
mov ecx, dword [ebp - 0x10044]
mov dword [ebp - 0x10018], 0
mov dword [ebp - 0x10014], 0xf
mov byte [ebp - 0x10028], 0
cmp ecx, 0x10
jb 0x4439fc
mov edx, dword [ebp - 0x10058]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4439f2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443b04
push ecx
push edx
call fcn.0044781c
add esp, 8
push 0x44
lea eax, [ebp - 0x100b4]
push 0
push eax
call fcn.004496f0
push 0x10000
lea eax, [ebp - 0x10010]
push 0
push eax
call fcn.004496f0
mov esi, dword [ebp - 0x10030]
add esp, 0x18
cmp esi, 0x8000
jbe 0x443a39
mov byte [ebp - 0x10059], 0
jmp 0x443aa3
cmp dword [ebp - 0x1002c], 8
lea ecx, [ebp - 0x10040]
lea eax, [ebp - 0x10010]
cmovae ecx, dword [ebp - 0x10040]
lea esi, [ecx + esi*2]
lea ecx, [ebp - 0x10040]
cmovae ecx, dword [ebp - 0x10040]
sub esi, ecx
push esi
push ecx
push eax
call fcn.00449170
add esp, 0xc
lea eax, [ebp - 0x10070]
push eax
lea eax, [ebp - 0x100b4]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x10010]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 1
sete byte [ebp - 0x10059]
mov ecx, dword [ebp - 0x1002c]
cmp ecx, 8
jb 0x443adf
mov edx, dword [ebp - 0x10040]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x443ad5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443b09
push ecx
push edx
call fcn.0044781c
add esp, 8
mov al, byte [ebp - 0x10059]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00447a97
mov esp, ebp
pop ebp
ret
call fcn.00410c50
call fcn.0044c8cf
call fcn.0044c8cf
int3