Function at 0x42d540
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d4
mov eax, dword [0x828208]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x10c], 3
mov dword [ebp - 0x110], 0
call fcn.0042f6c0
mov dword [ebp - 0x110], eax
mov eax, 4
imul ecx, eax, 0
mov dword [ebp + ecx - 0x120], 0x4c1768
call fcn.0042e7a0
test eax, eax
jne 0x42d5c9
push 1
lea edx, [ebp - 0x120]
push edx
push 1
push 0
push 0
push 0
call fcn.0042ffc0
add esp, 0x18
test eax, eax
je 0x42d5c9
mov eax, dword [ebp - 0x110]
push eax
call fcn.0042f710
add esp, 4
mov eax, 0xb
jmp 0x42d961
push 0x104
push 0x830be0
push 0x830ad8
push 0
call fcn.0042f140
add esp, 0x10
mov dword [ebp - 0x10c], eax
call fcn.0042e7a0
test eax, eax
je 0x42d861
push 0x104
push 0
lea ecx, [ebp - 0x108]
push ecx
call fcn.0048ff50
add esp, 0xc
push 0x104
lea edx, [ebp - 0x108]
push edx
call fcn.0042ef50
add esp, 8
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x42d643
cmp dword [ebp - 0x10c], 0xb
je 0x42d643
mov dword [ebp - 0x114], 1
jmp 0x42d64d
mov dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0
jne 0x42d840
push 0x44
push 0
lea eax, [ebp - 0x190]
push eax
call fcn.0048ff50
add esp, 0xc
xor ecx, ecx
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x190], 0x44
push 0x4c1778
push 0x104
lea edx, [ebp - 0x108]
push edx
call fcn.0049cd97
add esp, 0xc
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x190]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x108]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x42d702
push 0xffffffffffffffff
mov eax, dword [ebp - 0x13c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x13c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x42d725
call fcn.0042eac0
call fcn.0042e9f0
mov eax, dword [ebp - 0x110]
push eax
call fcn.0042f710
add esp, 4
mov eax, 3
jmp 0x42d961
push 0x104
lea ecx, [ebp - 0x108]
push ecx
call fcn.0042e800
add esp, 8
test eax, eax
je 0x42d83e
push 0x44
push 0
lea edx, [ebp - 0x1d4]
push edx
call fcn.0048ff50
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x1d4], 0x44
push 0x4c177c
push 0x104
lea ecx, [ebp - 0x108]
push ecx
call fcn.0049cd97
add esp, 0xc
push 0x4c17a0
push 0x104
lea edx, [ebp - 0x108]
push edx
call fcn.0049cd97
add esp, 0xc
push 0x830be0
push 0x104
lea eax, [ebp - 0x108]
push eax
call fcn.0049cd97
add esp, 0xc
lea ecx, [ebp - 0x14c]
push ecx
lea edx, [ebp - 0x1d4]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x42d81b
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x14c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x148]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x42d83e
call fcn.0042eac0
call fcn.0042e9f0
mov ecx, dword [ebp - 0x110]
push ecx
call fcn.0042f710
add esp, 4
mov eax, 3
jmp 0x42d961
jmp 0x42d85f
call fcn.0042eac0
mov edx, dword [ebp - 0x110]
push edx
call fcn.0042f710
add esp, 4
mov eax, dword [ebp - 0x10c]
jmp 0x42d961
jmp 0x42d876
push 0x830ad8
push 0
call fcn.0042f690
add esp, 8
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x42d894
cmp dword [ebp - 0x10c], 0xb
je 0x42d894
mov dword [ebp - 0x118], 1
jmp 0x42d89e
mov dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0
jne 0x42d942
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x128]
push ecx
lea edx, [ebp - 0x124]
push edx
call fcn.0042dae0
add esp, 0xc
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x42d8ec
cmp dword [ebp - 0x10c], 0xb
je 0x42d8ec
mov dword [ebp - 0x11c], 1
jmp 0x42d8f6
mov dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0
jne 0x42d942
cmp dword [ebp - 0x124], 2
jne 0x42d911
cmp dword [ebp - 0x128], 5
je 0x42d925
mov dword [0x830ad0], 3
mov dword [ebp - 0x10c], 7
cmp dword [ebp - 0x12c], 0
je 0x42d942
mov dword [0x830ad0], 4
mov dword [ebp - 0x10c], 4
call fcn.0042e9f0
call fcn.0042eac0
mov eax, dword [ebp - 0x110]
push eax
call fcn.0042f710
add esp, 4
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048980e
mov esp, ebp
pop ebp
ret