Function at 0x423350
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10d4
call fcn.0055dc30
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov dword [ebp - 0x54], 0xf
mov esi, dword [ebx]
mov edi, dword [ebx + 4]
mov dword [ebp - 0x58], 0
mov byte [ebp - 0x68], 0
cmp esi, edi
je 0x4233f2
nop
push 0x58a86c
lea eax, [ebp - 0x90]
push esi
push eax
call fcn.00416c00
add esp, 0xc
lea ecx, [ebp - 0x68]
push 0xffffffffffffffff
push 0
push eax
call fcn.0041a950
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0x10
jb 0x4233eb
mov eax, dword [ebp - 0x90]
inc ecx
cmp ecx, 0x1000
jb 0x4233e2
test al, 0x1f
jne 0x42378f
mov ecx, dword [eax - 4]
cmp ecx, eax
jae 0x42378f
sub eax, ecx
cmp eax, 4
jb 0x42378f
cmp eax, 0x23
ja 0x42378f
mov eax, ecx
push eax
call fcn.004533f0
add esp, 4
add esi, 0x18
cmp esi, edi
jne 0x423380
lea eax, [ebp - 0x68]
push eax
push str.Restarting_parent:
push 0x602a58
call fcn.00416940
add esp, 8
push eax
call fcn.00416730
mov edi, eax
add esp, 8
mov ecx, dword [edi]
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + edi + 0x30]
mov esi, dword [ecx + 4]
mov ecx, esi
mov dword [ebp - 0x4c], esi
mov edx, dword [esi]
call dword [edx + 4]
lea eax, [ebp - 0x50]
push eax
call fcn.00417f90
mov edx, dword [esi]
add esp, 4
mov ecx, esi
mov dword [ebp + 8], eax
call dword [edx + 8]
test eax, eax
je 0x42344b
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov ecx, dword [ebp + 8]
push 0xa
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
movzx eax, al
mov ecx, edi
push eax
call fcn.0041c380
mov ecx, edi
call fcn.0041bec0
push 1
push 0x58b2e0
push str.start
push str.spawn
call fcn.00423b10
push 0x1000
lea eax, [ebp - 0x10d4]
push 0
push eax
call fcn.00584f50
cmp dword [ebp - 0x54], 0x10
lea ecx, [ebp - 0x10d4]
push 0x800
lea eax, [ebp - 0x68]
cmovae eax, dword [ebp - 0x68]
push ecx
push eax
call fcn.0045e8e0
mov edx, eax
mov dword [ebp - 0x1c], 7
xor eax, eax
mov dword [ebp - 0x20], 0
add esp, 0x28
mov word [ebp - 0x30], ax
cmp word [edx], ax
jne 0x4234d1
xor ecx, ecx
jmp 0x4234e5
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4234d6
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x30]
call fcn.00422830
cmp dword [ebp - 0x20], 0
jne 0x423584
push str.Could_not_spawn_process:_error_in_commandline
push 0x602a58
call fcn.00416940
mov edi, eax
add esp, 8
mov ecx, dword [edi]
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + edi + 0x30]
mov esi, dword [ecx + 4]
mov ecx, esi
mov dword [ebp - 0x4c], esi
mov edx, dword [esi]
call dword [edx + 4]
lea eax, [ebp - 0x50]
push eax
call fcn.00417f90
mov edx, dword [esi]
add esp, 4
mov ecx, esi
mov ebx, eax
call dword [edx + 8]
test eax, eax
je 0x423544
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov eax, dword [ebx]
mov ecx, ebx
push 0xa
mov eax, dword [eax + 0x20]
call eax
movzx eax, al
mov ecx, edi
push eax
call fcn.0041c380
mov ecx, edi
call fcn.0041bec0
push 1
push 0x58b2e0
push str.fail
push str.spawn
call fcn.00423b10
add esp, 0x10
mov esi, 1
jmp 0x4236fd
mov eax, dword [ebx]
cmp dword [eax + 0x14], 0x10
jb 0x42358e
mov eax, dword [eax]
push 0x800
lea ecx, [ebp - 0x10d4]
push ecx
push eax
call fcn.0045e8e0
mov edx, eax
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 8], 0
add esp, 0xc
mov word [ebp - 0x18], ax
cmp word [edx], ax
jne 0x4235c2
xor ecx, ecx
jmp 0x4235d6
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4235c7
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x18]
call fcn.00422830
push 1
push 0xffffffffffffffff
lea eax, [ebp + 8]
mov dword [ebp + 8], 0x5c
push eax
lea ecx, [ebp - 0x18]
call fcn.00423290
xor ecx, ecx
mov dword [ebp - 0x34], 7
push eax
push ecx
lea eax, [ebp - 0x18]
mov word [ebp - 0x48], cx
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x38], 0
call fcn.00422710
push 0x44
lea eax, [ebp - 0xd4]
push 0
push eax
call fcn.00584f50
add esp, 0xc
mov dword [ebp - 0xd4], 0x44
cmp dword [ebp - 0x34], 8
lea esi, [ebp - 0x78]
lea ecx, [ebp - 0x48]
xorps xmm0, xmm0
cmovae ecx, dword [ebp - 0x48]
lea edx, [ebp - 0x30]
cmp dword [ebp - 0x1c], 8
lea eax, [ebp - 0x18]
push esi
cmovae edx, dword [ebp - 0x30]
lea esi, [ebp - 0xd4]
cmp dword [ebp - 4], 8
push esi
cmovae eax, dword [ebp - 0x18]
push ecx
push 0
push 0
push 0
push 0
push 0
push edx
push eax
movups xmmword [ebp - 0x78], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
mov ecx, str.fail
push 1
setne bl
mov eax, str.success
test bl, bl
push 0x58b2e0
cmove eax, ecx
push eax
push str.spawn
call fcn.00423b10
mov eax, dword [ebp - 0x34]
add esp, 0x10
movzx esi, bl
xor esi, 1
cmp eax, 8
jb 0x4236c0
inc eax
lea ecx, [ebp - 0x48]
push eax
push dword [ebp - 0x48]
call fcn.00422930
xor eax, eax
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x38], 0
cmp eax, 8
jb 0x4236e9
inc eax
lea ecx, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
call fcn.00422930
xor eax, eax
mov dword [ebp - 4], 7
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
mov eax, dword [ebp - 0x1c]
cmp eax, 8
jb 0x42373c
mov ecx, dword [ebp - 0x30]
inc eax
cmp eax, 0x7fffffff
ja 0x42378f
add eax, eax
cmp eax, 0x1000
jb 0x423733
test cl, 0x1f
jne 0x423794
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x423799
sub ecx, eax
cmp ecx, 4
jb 0x42379e
cmp ecx, 0x23
ja 0x4237a3
mov ecx, eax
push ecx
call fcn.004533f0
add esp, 4
xor eax, eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], 0
cmp eax, 0x10
jb 0x423786
mov ecx, dword [ebp - 0x68]
inc eax
cmp eax, 0x1000
jb 0x42377d
test cl, 0x1f
jne 0x4237a8
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4237ad
sub ecx, eax
cmp ecx, 4
jb 0x4237b2
cmp ecx, 0x23
ja 0x4237b7
mov ecx, eax
push ecx
call fcn.004533f0
add esp, 4
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.0056040e
call fcn.0056040e
call fcn.0056040e
call fcn.0056040e
call fcn.0056040e
call fcn.0056040e
call fcn.0056040e
call fcn.0056040e
call fcn.0056040e
int3