Function at 0x432ba7
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff918
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
lea ebx, [esi + 4]
push ebx
call fcn.0049af74
pop ecx
inc eax
push eax
push ebx
push esi
call fcn.0049ad70
add esp, 0xc
push esi
call fcn.00454478
pop ecx
xor ebx, ebx
jmp 0x432be5
mov al, byte [esi + ebx]
mov byte [ebp + ebx - 0x2a4], al
inc ebx
push esi
call fcn.0049af74
pop ecx
cmp eax, ebx
jbe 0x432c02
movsx edx, byte [esi + ebx]
cmp edx, 0x20
je 0x432c02
movsx ecx, byte [esi + ebx]
cmp ecx, 9
jne 0x432bda
mov byte [ebp + ebx - 0x2a4], 0
cmp byte [ebp - 0x2a4], 0
jne 0x432c41
push 0xa0
lea eax, [ebp - 0xa4]
push eax
push 0x466
push dword [edi + 0x3c]
call sub.USER32.dll_LoadStringA
lea edx, [ebp - 0xa4]
push edx
push edi
call fcn.0042d216
add esp, 8
jmp 0x432e1d
cmp dword [edi + 0x195], 0
setne cl
and ecx, 1
push ecx
push 0
push 0
lea eax, [edi + 0x3ad]
push eax
lea edx, [edi + 0x1ad]
push edx
lea ecx, [ebp - 0x2a4]
push ecx
lea eax, [ebp - 1]
push eax
call fcn.00405279
add esp, 0x1c
add ebx, esi
xor eax, eax
or ecx, 0xffffffff
push esi
push edi
mov edi, ebx
lea esi, [ebp - 0x4a4]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
lea esi, [ebp - 0x6e0]
mov eax, dword [edi + 0xac]
mov dword [ebp - 0x4aa], eax
xor eax, eax
mov dword [ebp - 0x6e8], 0x14
push edi
lea edx, [edi + 0xbad]
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
xor eax, eax
push edi
lea edi, [ebp - 0x2a4]
or ecx, 0xffffffff
lea esi, [ebp - 0x6aa]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
mov edx, dword [0x4b64a0]
lea ecx, [ebp - 0x6e8]
mov eax, dword [edi + 0xc98]
mov dword [ebp - 0x6ae], eax
mov dword [ebp - 0x6e4], edx
push ecx
push 0
push 0x404
push dword [edi + 0x40]
call sub.USER32.dll_SendMessageA
cmp dword [ebp - 0x6e4], 0
jne 0x432d72
push 0xa0
lea eax, [ebp - 0xa4]
push eax
push 0x45b
push dword [edi + 0x3c]
call sub.USER32.dll_LoadStringA
lea edx, [ebp - 0xa4]
push edx
push edi
call fcn.0042d216
add esp, 8
jmp 0x432e1d
movsx ecx, byte [edi + 0x1ad]
push ecx
call fcn.004a53fc
pop ecx
add eax, 0xffffffbf
push eax
call fcn.004a17dc
pop ecx
lea eax, [edi + 0x1ad]
push eax
call fcn.004a1240
pop ecx
lea edx, [ebp - 0x4a4]
push edx
lea ecx, [ebp - 0x2a4]
push ecx
call fcn.0049ae68
add esp, 8
push 2
lea eax, [ebp - 0x2a4]
push eax
call sub.KERNEL32.dll_WinExec
mov ebx, eax
cmp eax, 0x20
jae 0x432ddd
push 0xa0
lea edx, [ebp - 0xa4]
push edx
push 0x45c
push dword [edi + 0x3c]
call sub.USER32.dll_LoadStringA
jmp 0x432df6
push 0xa0
lea ecx, [ebp - 0xa4]
push ecx
push 0x45d
push dword [edi + 0x3c]
call sub.USER32.dll_LoadStringA
push ebx
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x2a4]
push edx
call fcn.004a00a0
add esp, 0xc
lea ecx, [ebp - 0x2a4]
push ecx
push edi
call fcn.0042d216
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret