Function at 0x6179c4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xe
push 0
push 0
dec ecx
jne 0x6179cc
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x617ebb
push dword fs:[eax]
mov dword fs:[eax], esp
push dword [ebx + 0x454]
push 0x617ed4
push 0x617ee4
lea eax, [ebp - 4]
mov edx, 3
call fcn.00408404
lea eax, [ebp - 0x10]
xor edx, edx
call fcn.00407e90
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.006178a4
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x10]
mov edx, dword [ebx + 0x44c]
mov edx, dword [edx + 0x30]
call fcn.005d8630
lea edx, [ebp - 0x28]
mov eax, ebx
call fcn.006178a4
mov eax, dword [ebp - 0x28]
mov esi, dword [ebx + 0x44c]
mov ecx, dword [esi + 0x30]
mov edx, dword [esi + 0x24]
call fcn.005d8b04
lea edx, [ebp - 0x2c]
mov eax, dword [0x668930]
mov eax, dword [eax]
call fcn.004fcf38
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 4]
call fcn.005d8d8c
mov eax, dword [ebx + 0x44c]
mov edx, dword [eax + 0x24]
mov ecx, 0x617f04
mov eax, dword [ebp - 4]
call fcn.005d8b04
push dword [ebx + 0x454]
push 0x617ed4
push 0x617f1c
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.00408404
mov eax, dword [ebp - 0x30]
push eax
mov ecx, 0x617f1c
lea eax, [ebp - 0x34]
mov edx, dword [0x66ff40]
call fcn.00408320
mov eax, dword [ebp - 0x34]
pop edx
call fcn.005d8d8c
mov eax, dword [ebx + 0x44c]
mov eax, dword [eax + 0x88]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x617b80
mov eax, dword [ebx + 0x44c]
mov eax, dword [eax + 0x88]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x617b80
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 8]
mov eax, dword [ebx + 0x44c]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 8]
test eax, eax
je 0x617b27
mov edx, eax
sub edx, 0xa
cmp word [edx], 2
je 0x617b27
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00406e9c
mov esi, eax
test esi, esi
je 0x617b32
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0x38]
push eax
mov ecx, esi
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.0040862c
mov edx, dword [ebp - 0x38]
lea eax, [ebp - 0xc]
mov ecx, 0x617f40
call fcn.00408320
lea edx, [ebp - 0x3c]
mov eax, ebx
call fcn.006178a4
mov eax, dword [ebp - 0x3c]
push eax
push 0
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.005d5bc4
inc dword [ebp - 0x1c]
dec dword [ebp - 0x20]
jne 0x617af3
mov esi, dword [ebx + 0x44c]
cmp dword [esi + 0x80], 0
je 0x617bb3
lea edx, [ebp - 0x40]
mov eax, ebx
call fcn.006178a4
mov ecx, dword [ebp - 0x40]
mov edx, dword [esi + 0x84]
mov eax, dword [ebx + 0x44c]
mov eax, dword [eax + 0x80]
call fcn.0060e7a4
mov eax, dword [ebx + 0x44c]
cmp dword [eax + 0x74], 0
je 0x617c0b
push 0
push 0x617f4c
push 0x617f5c
push dword [ebx + 0x454]
push 0x617ed4
mov eax, dword [ebx + 0x44c]
push dword [eax + 0x74]
push 0x617f78
lea eax, [ebp - 0x44]
mov edx, 5
call fcn.00408404
mov eax, dword [ebp - 0x44]
call fcn.00407ec8
push eax
push 0x617f7c
push 0x617f98
push 0
call sub.shell32.dll_ShellExecuteW
mov eax, dword [ebx + 0x44c]
cmp dword [eax + 0x78], 0
je 0x617c63
push 0
push 0x617f4c
push 0x617f5c
push dword [ebx + 0x454]
push 0x617ed4
mov eax, dword [ebx + 0x44c]
push dword [eax + 0x78]
push 0x617f78
lea eax, [ebp - 0x48]
mov edx, 5
call fcn.00408404
mov eax, dword [ebp - 0x48]
call fcn.00407ec8
push eax
push 0x617f7c
push 0x617f98
push 0
call sub.shell32.dll_ShellExecuteW
mov eax, dword [ebx + 0x44c]
cmp dword [eax + 0x7c], 0
je 0x617cbb
push 0
push 0x617f4c
push 0x617f5c
push dword [ebx + 0x454]
push 0x617ed4
mov eax, dword [ebx + 0x44c]
push dword [eax + 0x7c]
push 0x617f78
lea eax, [ebp - 0x4c]
mov edx, 5
call fcn.00408404
mov eax, dword [ebp - 0x4c]
call fcn.00407ec8
push eax
push 0x617f7c
push 0x617f98
push 0
call sub.shell32.dll_ShellExecuteW
mov esi, dword [ebx + 0x44c]
cmp byte [esi + 0x5d], 0
je 0x617d3b
cmp byte [esi + 0x5e], 0
je 0x617d24
cmp dword [esi + 0x64], 0
jne 0x617cdd
mov eax, 0x617fb0
call fcn.004b2c60
lea edx, [ebp - 0x54]
mov eax, ebx
call fcn.006178a4
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
call fcn.00416c2c
mov edx, dword [ebp - 0x50]
mov esi, dword [ebx + 0x44c]
mov ecx, dword [esi + 0x60]
lea eax, [ebp - 0x14]
call fcn.00408320
mov edx, dword [esi + 0x68]
mov eax, dword [esi + 0x64]
mov ecx, dword [ebp - 0x14]
call fcn.006137c4
mov eax, dword [ebx + 0x44c]
mov eax, dword [eax + 0x64]
call fcn.00613538
jmp 0x617d3b
lea edx, [ebp - 0x58]
mov eax, ebx
call fcn.006178a4
mov ecx, dword [ebp - 0x58]
mov eax, dword [esi + 0xc]
mov dl, 1
call fcn.005d6aec
lea edx, [ebp - 0x5c]
mov eax, dword [0x668d20]
mov eax, dword [eax + 0x30]
call fcn.0060f17c
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebx + 0x44c]
mov eax, dword [eax + 0xc]
call fcn.004085c4
jne 0x617dad
lea edx, [ebp - 0x18]
mov eax, dword [0x668d20]
mov eax, dword [eax + 0x38]
call fcn.0060f17c
push 1
push 0
push 0x617fbc
push dword [ebx + 0x454]
push 0x617ed4
push dword [ebp - 0x18]
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00408404
mov eax, dword [ebp - 0x60]
call fcn.00407ec8
push eax
push 0x617f98
mov eax, ebx
call fcn.004d581c
push eax
call sub.shell32.dll_ShellExecuteW
mov eax, dword [ebx + 0x454]
push eax
mov eax, dword [ebx + 0x44c]
mov eax, dword [eax + 0x10]
push eax
push 0x617fd4
lea edx, [ebp - 0x64]
mov eax, ebx
call fcn.006178a4
mov ecx, dword [ebp - 0x64]
mov esi, dword [ebx + 0x44c]
mov edx, dword [esi + 0x30]
mov eax, dword [esi + 0xc]
call fcn.0060eb80
mov eax, dword [ebx + 0x44c]
cmp dword [eax + 0x4c], 0
je 0x617e25
push 1
push 0
mov eax, dword [ebx + 0x44c]
mov eax, dword [eax + 0x4c]
call fcn.00407ec8
push eax
lea edx, [ebp - 0x68]
mov eax, ebx
call fcn.006178a4
mov eax, dword [ebp - 0x68]
call fcn.00407ec8
push eax
push 0x617f98
mov eax, ebx
call fcn.004d581c
push eax
call sub.shell32.dll_ShellExecuteW
mov eax, dword [ebx + 0x44c]
cmp dword [eax + 0x44], 0
je 0x617e5c
push dword [ebx + 0x454]
push 0x617ed4
mov eax, dword [ebx + 0x44c]
push dword [eax + 0x44]
lea eax, [ebp - 0x6c]
mov edx, 3
call fcn.00408404
mov eax, dword [ebp - 0x6c]
xor edx, edx
call fcn.005d740c
mov eax, dword [ebx + 0x44c]
cmp dword [eax + 0x48], 0
je 0x617e93
push dword [ebx + 0x454]
push 0x617ed4
mov eax, dword [ebx + 0x44c]
push dword [eax + 0x48]
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.00408404
mov eax, dword [ebp - 0x70]
xor edx, edx
call fcn.005d740c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x617ec2
lea eax, [ebp - 0x70]
mov edx, 0x14
call fcn.00407e34
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.00407e34
ret