Function at 0x42c07c
Capabilities:
Create process on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor ebx, ebx
push 0x44
mov esi, eax
lea eax, [ebp - 0x84]
push ebx
push eax
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
call fcn.00408720
xor eax, eax
lea edi, [ebp - 0x18]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
add esp, 0xc
lea edi, [ebp - 0x40]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x30]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040ccd6
xor eax, eax
lea edi, [ebp - 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040cd62
mov edi, eax
cmp edi, ebx
jge 0x42c0ff
push 0x44b750
jmp 0x42c1f3
lea eax, [ebp - 4]
push eax
push ebx
lea eax, [ebp - 0x30]
push eax
call fcn.0040d47c
mov edi, eax
cmp edi, ebx
jge 0x42c11d
push 0x44b730
jmp 0x42c1f3
push esi
push dword [ebp - 0x2c]
lea eax, [ebp - 8]
push dword [ebp - 0x30]
push 0x402f5c
push dword [ebp + 0xc]
push 0x43beea
push eax
call fcn.0043007e
mov edi, eax
add esp, 0x1c
cmp edi, ebx
jge 0x42c14d
push 0x44b70a
jmp 0x42c1f3
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push ebx
push 0x8000000
push ebx
push ebx
push ebx
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x42c1a8
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x42c186
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x42c191
mov edi, 0x80004005
push edi
push 0x59
push 0x44b60c
call fcn.004315c0
push dword [ebp + 8]
push 0x44b6dc
jmp 0x42c218
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x18], ebx
call fcn.0040d698
mov edi, eax
cmp edi, ebx
jge 0x42c1d3
push 0x44b6a4
jmp 0x42c1f3
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x42bfde
push dword [ebp - 0x20]
call fcn.0040dc24
mov edi, eax
cmp edi, ebx
jge 0x42c1fd
push 0x44b672
push edi
call fcn.00430a6a
pop ecx
pop ecx
jmp 0x42c221
push dword [ebp + 0x18]
push 0xffffffffffffffff
push dword [ebp - 0x24]
call fcn.0042e9a8
mov edi, eax
cmp edi, ebx
jge 0x42c221
push dword [ebp + 8]
push 0x44b646
push edi
call fcn.00430a6a
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x14], ebx
je 0x42c234
push dword [ebp - 0x14]
call esi
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x18], ebx
je 0x42c241
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 8], ebx
je 0x42c24e
push dword [ebp - 8]
call fcn.0042eb62
cmp dword [ebp - 4], ebx
je 0x42c25b
push dword [ebp - 4]
call esi
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x30]
push eax
call fcn.0040ccf6
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x14