Function at 0x430ae0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x79c
mov eax, dword [0x4e50cc]
xor eax, ebp
mov dword [ebp - 8], eax
push esi
mov esi, ecx
push edi
mov edi, edx
test esi, esi
je 0x430d50
cmp word [esi], 0
je 0x430d50
push 0x114
lea eax, [ebp - 0x73c]
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x73c], 0x114
lea eax, [ebp - 0x73c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
xor eax, eax
push 0x40e
push eax
mov word [ebp - 0x624], ax
lea eax, [ebp - 0x622]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
xor eax, eax
mov word [ebp - 0x214], ax
push 0x206
push eax
lea eax, [ebp - 0x212]
push eax
call sub.MSVCR120.dll_memset
lea ecx, [ebp - 0x624]
add esp, 0xc
mov eax, ecx
mov edx, 0x208
sub esi, eax
lea eax, [edx + 0x7ffffdf6]
test eax, eax
je 0x430ba1
movzx eax, word [ecx + esi]
test ax, ax
je 0x430ba1
mov word [ecx], ax
add ecx, 2
dec edx
jne 0x430b83
jmp 0x430ba5
test edx, edx
jne 0x430ba8
sub ecx, 2
xor eax, eax
mov esi, 0x4c431c
mov word [ecx], ax
test edi, edi
lea ecx, [ebp - 0x214]
mov edx, 0x104
cmovne esi, edi
mov eax, ecx
sub esi, eax
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x430be4
movzx eax, word [ecx + esi]
test ax, ax
je 0x430be4
mov word [ecx], ax
add ecx, 2
dec edx
jne 0x430bc6
jmp 0x430be8
test edx, edx
jne 0x430beb
sub ecx, 2
xor eax, eax
push 0x44
push eax
mov word [ecx], ax
lea eax, [ebp - 0x79c]
push eax
call sub.MSVCR120.dll_memset
mov eax, dword [ebp + 0xc]
add esp, 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x79c], 0x44
mov dword [ebp - 0x770], 1
mov word [ebp - 0x76c], ax
push 0x60081
push 0
push 0
push 0x4c46a0
movdqu xmmword [ebp - 0x750], xmm0
call dword [sym.imp.USER32.dll_OpenDesktopW]
mov dword [ebp - 0x740], eax
test eax, eax
jne 0x430c64
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, 0x80070005
pop edi
pop esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004a5ae0
mov esp, ebp
pop ebp
ret
push 0x8001
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, eax
push 0
call edi
xor ecx, ecx
lea eax, [ebp - 0x750]
cmp word [ebp - 0x214], cx
push eax
lea eax, [ebp - 0x79c]
push eax
lea eax, [ebp - 0x214]
cmove eax, ecx
push eax
push ecx
push ecx
push ecx
push ecx
push ecx
lea eax, [ebp - 0x624]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x430cc0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, 0x80004005
jmp 0x430d2b
push 0
call edi
push dword [ebp + 8]
push dword [ebp - 0x750]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x430ce5
push 0x5b4
call edi
xor edi, edi
jmp 0x430cf5
test eax, eax
jne 0x430cf0
push eax
call edi
xor edi, edi
jmp 0x430cf5
mov edi, 0x80004005
mov eax, dword [ebp - 0x74c]
test eax, eax
je 0x430d10
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x750]
test eax, eax
je 0x430d2b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x750], 0
push esi
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push dword [ebp - 0x740]
call dword [sym.imp.USER32.dll_CloseDesktop]
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004a5ae0
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 8]
mov eax, 0x80070057
pop edi
xor ecx, ebp
pop esi
call fcn.004a5ae0
mov esp, ebp
pop ebp
ret