Function at 0x100016c0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b4
mov eax, dword [0x10026484]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
shr ecx, 0x10
and ecx, 0xffff
movzx edx, cx
test edx, edx
je 0x100016f3
mov eax, 0x80070057
jmp 0x10001978
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
and ecx, 0xffff
movzx edx, cx
mov dword [ebp - 0x2b4], edx
cmp dword [ebp - 0x2b4], 0
je 0x10001716
jmp 0x10001973
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0xc]
call fcn.10002410
lea eax, [ebp - 0x280]
push eax
mov ecx, dword [ebp + 8]
add ecx, 8
call fcn.10002110
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
jmp 0x10001758
push 0
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0xc]
call fcn.10002450
lea ecx, [ebp - 0x290]
push ecx
mov ecx, dword [ebp + 8]
add ecx, 8
call fcn.10002140
push eax
lea ecx, [ebp - 0xc]
call fcn.10002490
movzx edx, al
test edx, edx
je 0x100017a4
lea ecx, [ebp - 0xc]
call fcn.10002430
mov ecx, eax
call fcn.100020f0
push eax
call fcn.1000ba36
add esp, 4
mov ecx, dword [ebp - 0x21c]
lea edx, [ecx + eax + 1]
mov dword [ebp - 0x21c], edx
jmp 0x10001747
push 0x104
lea eax, [ebp - 0x218]
push eax
mov ecx, 0x10027798
call fcn.100032b0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
lea ecx, [ebp - 0x218]
push ecx
call fcn.10002010
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x1000196f
mov edx, dword [ebp - 4]
add edx, 2
mov dword [ebp - 4], edx
xor eax, eax
mov ecx, dword [ebp - 4]
mov word [ecx], ax
push str.Commit.exe
push 0x104
lea edx, [ebp - 0x218]
push edx
call fcn.1000b50f
add esp, 0xc
mov eax, dword [ebp - 0x21c]
add eax, 0xa
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1000b41d
add esp, 4
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
je 0x1000196f
xor ecx, ecx
mov edx, dword [ebp - 0x220]
mov word [edx], cx
lea eax, [ebp - 0x29c]
push eax
mov ecx, dword [ebp + 8]
add ecx, 8
call fcn.10002110
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
jmp 0x10001885
push 0
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0xc]
call fcn.10002450
lea ecx, [ebp - 0x2ac]
push ecx
mov ecx, dword [ebp + 8]
add ecx, 8
call fcn.10002140
push eax
lea ecx, [ebp - 0xc]
call fcn.10002490
movzx edx, al
test edx, edx
je 0x100018f0
lea ecx, [ebp - 0xc]
call fcn.10002430
mov ecx, eax
call fcn.100020f0
push eax
mov eax, dword [ebp - 0x21c]
add eax, 0xa
push eax
mov ecx, dword [ebp - 0x220]
push ecx
call fcn.1000b50f
add esp, 0xc
push 0x1001f488
mov edx, dword [ebp - 0x21c]
add edx, 0xa
push edx
mov eax, dword [ebp - 0x220]
push eax
call fcn.1000b50f
add esp, 0xc
jmp 0x10001874
mov dword [ebp - 0x278], 0
push 0x40
push 0
lea ecx, [ebp - 0x274]
push ecx
call fcn.1000ba50
add esp, 0xc
mov dword [ebp - 0x230], 0
xor edx, edx
mov dword [ebp - 0x22c], edx
mov dword [ebp - 0x228], edx
mov dword [ebp - 0x224], edx
mov dword [ebp - 0x278], 0x44
push 5
push 0
mov eax, dword [ebp - 0x220]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0x1001f48c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x220]
mov dword [ebp - 0x2b0], edx
mov eax, dword [ebp - 0x2b0]
push eax
call fcn.1000b504
add esp, 4
xor eax, eax
jmp 0x10001978
mov eax, 0x80070057
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000b972
mov esp, ebp
pop ebp
ret 8