Function at 0x6190ca90
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push 0x5ac
mov eax, 0x619213ac
call fcn.6191ef5d
xor ebx, ebx
push 0x40f
lea eax, [ebp - 0x41f]
push ebx
mov dword [ebp - 0x550], ebx
push eax
mov edi, ecx
mov byte [ebp - 0x420], bl
call sub.MSVCR100.dll_memset
push dword [0x61931de8]
lea eax, [ebp - 0x420]
push str._s_versionUp.exe
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x18
push ebx
lea eax, [ebp - 0x548]
push eax
lea eax, [ebp - 0x420]
push eax
mov dword [ebp - 0x548], ebx
mov dword [ebp - 0x544], ebx
mov dword [ebp - 0x540], ebx
mov dword [ebp - 0x53c], ebx
mov dword [ebp - 0x538], ebx
mov dword [ebp - 0x534], ebx
call sub.mfc100.dll_Ordinal_14116
test eax, eax
je 0x6190ce13
lea ecx, [ebp - 0x558]
call dword [0x61923a48]
lea ecx, [ebp - 0x554]
mov dword [ebp - 4], ebx
call dword [0x61923a48]
lea ecx, [ebp - 0x560]
call dword [0x61923a48]
lea ecx, [ebp - 0x564]
call dword [0x61923a48]
lea ecx, [ebp - 0x55c]
call dword [0x61923a48]
cmp dword [0x61931dfc], 1
mov byte [ebp - 4], 4
mov esi, 0x61931d30
jne 0x6190cb74
mov eax, 0x619277a8
jmp 0x6190cbac
push ecx
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0x61931e10
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x54c]
push eax
mov ecx, esi
call fcn.61905b43
mov ecx, eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x550], 1
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x554]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
test byte [ebp - 0x550], 1
mov dword [ebp - 4], 4
je 0x6190cbdc
and dword [ebp - 0x550], 0xfffffffe
lea ecx, [ebp - 0x54c]
call dword [0x61923a58]
lea eax, [ebp - 0x554]
push eax
lea eax, [ebp - 0x54c]
push 0x619277a4
push eax
call fcn.6190a7a3
add esp, 0xc
push eax
lea ecx, [ebp - 0x554]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 4
call dword [0x61923a58]
cmp dword [0x61931dfc], 1
jne 0x6190cc28
mov eax, 0x619277a8
jmp 0x6190cc5f
push ecx
lea eax, [edi + 0x4a98]
mov ecx, esp
mov dword [ebp - 0x54c], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x54c]
push eax
mov ecx, esi
call fcn.61905b43
or dword [ebp - 0x550], 2
mov ecx, eax
mov byte [ebp - 4], 7
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x560]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
test byte [ebp - 0x550], 2
mov dword [ebp - 4], 4
je 0x6190cc88
lea ecx, [ebp - 0x54c]
call dword [0x61923a58]
push ecx
lea eax, [edi + 0x4a9c]
mov ecx, esp
mov dword [ebp - 0x54c], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
popal
lea eax, [ebp - 0x54c]
push eax
mov ecx, esi
call fcn.61905b43
push eax
lea ecx, [ebp - 0x564]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 4
call dword [0x61923a58]
push ecx
add edi, 0x4aa0
mov ecx, esp
mov dword [ebp - 0x54c], esp
push edi
call dword [sym.imp.mfc100.dll_Ordinal_300]
popal
lea eax, [ebp - 0x54c]
push eax
mov ecx, esi
call fcn.61905b43
push eax
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 4
call dword [0x61923a58]
push dword [ebp - 0x55c]
lea eax, [ebp - 0x558]
push dword [ebp - 0x564]
push dword [ebp - 0x560]
push dword [ebp - 0x554]
push str._s__s__s__s
push eax
call dword [0x61923a4c]
push dword [ebp - 0x558]
lea eax, [ebp - 0x420]
push dword [0x61931de8]
push str._s_versionUp.exe__R__s
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x10
lea eax, [ebp - 0x574]
push ebx
push eax
call sub.MSVCR100.dll_memset
push 0x44
pop esi
push esi
lea eax, [ebp - 0x5b8]
push ebx
push eax
call sub.MSVCR100.dll_memset
add esp, 0x40
xor eax, eax
inc eax
mov dword [ebp - 0x58c], eax
mov word [ebp - 0x588], ax
lea eax, [ebp - 0x574]
push eax
lea eax, [ebp - 0x5b8]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x420]
push eax
mov dword [ebp - 0x5b8], esi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x6190cdc1
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x6190cdd7
push dword [ebp - 0x570]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x574]
call esi
lea ecx, [ebp - 0x55c]
call dword [0x61923a58]
lea ecx, [ebp - 0x564]
call dword [0x61923a58]
lea ecx, [ebp - 0x560]
call dword [0x61923a58]
lea ecx, [ebp - 0x554]
call dword [0x61923a58]
lea ecx, [ebp - 0x558]
call dword [0x61923a58]
call fcn.6191efe0
ret