Function at 0x431dd0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x898
mov eax, dword [0x48807c]
xor eax, esp
mov dword [esp + 0x894], eax
push ebx
push ebp
push edi
mov edi, dword [esp + 0x8ac]
mov ebp, ecx
push str.PKGMAIN::CommandPrintTestPage___n
mov dword [esp + 0x20], ebp
mov dword [esp + 0x18], edi
call fcn.004454c0
xor ebx, ebx
add esp, 4
cmp word [edi], bx
je 0x4320cc
lea edx, [esp + 0x80]
mov eax, edi
sub edx, edi
jmp 0x431e20
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, bx
jne 0x431e20
mov ecx, dword [ebp + 0x21c]
push esi
push 0x478ec8
push 0x478ec4
lea eax, [esp + 0x8c]
push eax
call fcn.00449bc0
push 0x478ebc
push 0x46e600
lea ecx, [esp + 0x8c]
push ecx
mov ecx, dword [ebp + 0x21c]
call fcn.00449bc0
lea edx, [esp + 0x84]
push edx
lea eax, [esp + 0x290]
push str.rundll32_printui.dll_PrintUIEntry__k__n___s_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea ecx, [esp + 0x298]
push ecx
push str.cmd___s__n
call fcn.004454c0
xor eax, eax
push 0x44
lea edx, [esp + 0x58]
push ebx
push edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
call fcn.00453450
add esp, 0x20
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x44]
push edx
push ebx
push ebx
push ebx
push ebx
mov eax, 1
push ebx
mov word [esp + 0x8c], ax
mov dword [esp + 0x88], eax
push ebx
lea eax, [esp + 0x2ac]
push eax
push ebx
mov dword [esp + 0x68], 0x44
xor esi, esi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x431f3d
mov edi, dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [esp + 0x14], ebx
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x14]
push ecx
push edx
call edi
mov eax, dword [esp + 0x14]
inc esi
cmp esi, 5
jg 0x431f2c
cmp eax, 0x103
je 0x431f04
push eax
push str.dwExitCode___d__n
call fcn.004454c0
mov edi, dword [esp + 0x20]
jmp 0x431f4e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateProcess_failure____ld_n
call fcn.004454c0
add esp, 8
cmp dword [esp + 0x8b4], ebx
je 0x432096
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x18]
push ecx
push edi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], 0xf000c
call sub.WINSPOOL.DRV_OpenPrinterW
test eax, eax
je 0x43208c
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], ebx
mov byte [esp + 0x13], bl
mov ebx, 1
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push 0
push 1
push 0x63
push 0
push ecx
call sub.WINSPOOL.DRV_EnumJobsW
mov eax, dword [esp + 0x1c]
test eax, eax
jbe 0x4320c5
push eax
call fcn.00453c61
mov ecx, dword [esp + 0x20]
add esp, 4
mov ebp, eax
lea edx, [esp + 0x18]
push edx
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x20]
push eax
push ecx
push ebp
push 1
push 0x63
push 0
push edx
call sub.WINSPOOL.DRV_EnumJobsW
test eax, eax
je 0x432042
xor edi, edi
cmp dword [esp + 0x18], edi
jle 0x432042
mov esi, ebp
lea ebx, [ebx]
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi]
push eax
push ecx
push str._Job_ID___d__status__d_n
call fcn.004454c0
add esp, 0xc
cmp dword [esi + 0x1c], 0x80
je 0x432029
inc edi
add esi, 0x40
cmp edi, dword [esp + 0x18]
jl 0x432000
jmp 0x432042
mov edx, dword [esi + 0x1c]
mov eax, dword [esi]
push edx
push eax
push str._Job_ID___d__status__d_n
call fcn.004454c0
add esp, 0xc
mov byte [esp + 0x13], 1
test ebp, ebp
je 0x43204f
push ebp
call fcn.004534ca
add esp, 4
mov ebp, dword [esp + 0x20]
push 0x3e8
inc ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push str.___Count__d_n
call fcn.004454c0
add esp, 8
cmp byte [esp + 0x13], 0
jne 0x43207d
cmp ebx, 0x1e
jl 0x431f97
push str.Job_Done_n
call fcn.004454c0
add esp, 4
xor ebx, ebx
mov ecx, dword [esp + 0x14]
push ecx
call sub.WINSPOOL.DRV_ClosePrinter
mov eax, str.PRINTTESTPAGE_Success
lea edx, [ebp + 0x484]
mov dword [ebp + 0x480], 1
mov dword [ebp + 0x47c], ebx
sub edx, eax
pop esi
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, bx
jne 0x4320b4
jmp 0x4320f4
mov byte [esp + 0x13], 1
jmp 0x432053
mov eax, str.PRINTTESTPAGE_failed
lea edx, [ebp + 0x484]
mov dword [ebp + 0x480], ebx
mov dword [ebp + 0x47c], ebx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, bx
jne 0x4320e5
mov ecx, dword [esp + 0x8a0]
pop edi
pop ebp
pop ebx
xor ecx, esp
xor eax, eax
call fcn.00453432
add esp, 0x898
ret 0xc