Function at 0x429ec6
Capabilities:
Create process on windows

Disassembly:
push 0x7c
mov eax, 0x4bd5e4
call fcn.00492516
mov esi, ecx
xor ebx, ebx
cmp dword [esi + 0x58], ebx
je 0x429ee5
xor eax, eax
call fcn.004925ee
ret 4
lea edi, [esi + 0x598]
mov ecx, edi
call fcn.0040d4fd
test al, al
jne 0x429edb
push edi
lea ecx, [ebp - 0x14]
call fcn.004705c0
cmp byte [ebp - 0xd], 0xff
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x14]
jne 0x429f0e
mov eax, dword [ebp - 0x14]
push 0x4d18e8
push eax
call fcn.00491770
pop ecx
test eax, eax
lea eax, [esi + 0x168]
pop ecx
push eax
lea eax, [ebp - 0x34]
jne 0x429f3d
push str._distcode
push eax
call fcn.00470fb0
add esp, 0xc
mov byte [ebp - 4], 1
jmp 0x429f4f
push 0x4d25c0
push eax
call fcn.00470fb0
add esp, 0xc
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x14]
call fcn.00470bc0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.00470660
lea eax, [esi + 0x1a8]
push eax
lea eax, [ebp - 0x34]
push 0x4d25b8
push eax
call fcn.00470fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.00470bc0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.00470660
lea eax, [esi + 0x190]
push eax
lea eax, [ebp - 0x34]
push str.li
push eax
call fcn.00470fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.00470bc0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.00470660
lea ecx, [ebp - 0x2c]
call fcn.004703d0
mov eax, dword [esi + 0xb30]
mov byte [ebp - 4], 5
cmp eax, 1
jb 0x42a005
push eax
push 0x2c
lea eax, [ebp - 0x34]
push eax
lea ecx, [esi + 0x624]
call fcn.00471000
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.00470710
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 5
call fcn.00470660
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push str.cancelled
push eax
call fcn.00470fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 7
call fcn.00470bc0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 5
call fcn.00470660
lea ecx, [ebp - 0x24]
call fcn.004703d0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.004703d0
mov edi, dword [esi + 0x72c]
mov byte [ebp - 4], 9
jmp 0x42a12e
cmp dword [edi + 8], ebx
je 0x42a0bf
lea ecx, [ebp - 0x24]
call fcn.0040d4fd
test al, al
jne 0x42a095
push 0x4d1e7c
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00470f60
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xa
call fcn.00470710
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.00470660
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00470f10
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xb
call fcn.00470710
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 9
call fcn.00470660
cmp dword [edi + 0xc], ebx
je 0x42a128
lea ecx, [ebp - 0x1c]
call fcn.0040d4fd
test al, al
jne 0x42a0fe
push 0x4d1e7c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00470f60
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 9
call fcn.00470660
push edi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00470f10
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
call fcn.00470710
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.00470660
add edi, 0xd0
cmp edi, dword [esi + 0x730]
jne 0x42a056
lea ecx, [ebp - 0x24]
call fcn.0040d4fd
mov esi, str.none
test al, al
je 0x42a154
push esi
lea ecx, [ebp - 0x24]
call fcn.004707b0
lea ecx, [ebp - 0x1c]
call fcn.0040d4fd
test al, al
je 0x42a169
push esi
lea ecx, [ebp - 0x1c]
call fcn.004707b0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x3c]
push str.displayedoffer
push eax
call fcn.00470fb0
push str.acceptedoffer
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0xe
call fcn.00470f60
lea ecx, [ebp - 0x1c]
push ecx
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0xf
call fcn.00470f10
add esp, 0x24
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call fcn.00470bc0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00470660
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xe
call fcn.00470660
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 9
call fcn.00470660
push dword [ebp + 8]
lea eax, [ebp - 0x4c]
push str.action
push eax
call fcn.00470fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call fcn.00470bc0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.00470660
push 0x38
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.00491e90
add esp, 0xc
cmp byte [ebp - 0xd], 0xff
mov dword [ebp - 0x88], 0x3c
mov dword [ebp - 0x84], 0x440
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], str.open
lea eax, [ebp - 0x14]
jne 0x42a23d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x78], eax
xor esi, esi
lea eax, [ebp - 0x88]
inc esi
push eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], esi
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
je 0x42a29c
push dword [ebp - 0x50]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.00470660
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.00470660
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00470660
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00470660
mov eax, esi
jmp 0x429edd
xor esi, esi
jmp 0x42a266