Function at 0x42f79c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
push esi
mov dword [ebp - 0x34], 1
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
js 0x42f7d2
mov ecx, dword [ebp - 0x38]
call fcn.004178bd
mov eax, dword [ebp - 0x38]
add eax, 0x18
mov dword [ebp - 0x38], eax
jmp 0x42f7b6
mov dword [ebp - 4], 0x86cce57b
mov dword [ebp - 0xc], 0x6e28
mov dword [ebp - 0x18], 0
jmp 0x42f7f0
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x42f806
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x88], 0xffffffff
jmp 0x42f7e9
mov dword [ebp - 4], 0xa0256915
cmp dword [ebp - 4], 0
jne 0x42f89e
mov eax, dword [ebp - 4]
mov dword [ebp - 0xf8], eax
xor eax, eax
cmp eax, 0x44401d1b
jle 0x42f835
mov dword [ebp - 0xb4], 1
jmp 0x42f83c
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0x49b7
jg 0x42f851
mov dword [ebp - 0x78], 1
jmp 0x42f855
and dword [ebp - 0x78], 0
cmp dword [ebp - 0x78], 0xece3051e
jbe 0x42f870
mov eax, 0x9cd4431f
test eax, eax
jne 0x42f870
and dword [ebp - 0xd0], 0
jmp 0x42f87a
mov dword [ebp - 0xd0], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 4], 0
jge 0x42f898
cmp dword [ebp - 4], 0
jne 0x42f89e
and dword [ebp - 0x4c], 0
jmp 0x42f8a5
mov dword [ebp - 0x4c], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4c]
mov dword [ebp + eax - 0x88], ecx
or eax, 0xffffffff
je 0x42f8d1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x88], 0
je 0x42f8d1
mov dword [ebp - 0x64], 1
jmp 0x42f8d5
and dword [ebp - 0x64], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x88]
add eax, 5
cmp eax, 0xfafe44fa
jne 0x42f8f7
mov dword [ebp - 0x8c], 1
jmp 0x42f8fe
and dword [ebp - 0x8c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x8c], eax
jne 0x42f91c
mov dword [ebp - 0x54], 1
jmp 0x42f920
and dword [ebp - 0x54], 0
cmp dword [ebp - 0x54], 0xfffffffd
ja 0x42f932
mov dword [ebp - 0x94], 1
jmp 0x42f939
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x94], eax
jle 0x42f94d
mov dword [ebp - 0x5c], 1
jmp 0x42f951
and dword [ebp - 0x5c], 0
cmp dword [ebp - 0x5c], 0x7c5c6a81
jg 0x42f966
mov dword [ebp - 0x9c], 1
jmp 0x42f96d
and dword [ebp - 0x9c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x88]
imul eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x64], eax
je 0x42f991
mov dword [ebp - 0xa4], 1
jmp 0x42f998
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0x99e68fc7
jne 0x42f9ad
mov dword [ebp - 0x6c], 1
jmp 0x42f9b1
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x6c], eax
jl 0x42f9c5
mov dword [ebp - 0xac], 1
jmp 0x42f9cc
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
add eax, 0x2c7e
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x88]
jg 0x42f9ee
mov dword [ebp - 0x74], 1
jmp 0x42f9f2
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x42fd1f
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x44], 0xb862
mov dword [ebp - 0x20], 0
jmp 0x42fa37
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x42fa4d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x128], 9
jmp 0x42fa30
mov dword [ebp - 4], 0
jmp 0x42fa5d
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jg 0x42fd16
mov dword [ebp - 0xd8], 0xa44bab92
mov dword [ebp - 0xdc], 0x98c53483
mov dword [ebp - 0xc], 0
jmp 0x42fa8b
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jg 0x42fd11
push 2
lea ecx, [ebp - 0xcc]
call fcn.0041796c
mov dword [ebp - 0x2c], 0
jmp 0x42fab2
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x42face
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xcc]
call fcn.00417a5a
mov dword [eax], 5
jmp 0x42faab
push 0
lea ecx, [ebp - 0xcc]
call fcn.00417a5a
mov dword [eax], 3
jmp 0x42fafe
push 0
lea ecx, [ebp - 0xcc]
call fcn.00417a5a
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xcc]
call fcn.00417a5a
cmp dword [eax], 0
jl 0x42fccd
push 1
lea ecx, [ebp - 0xe8]
call fcn.0041796c
mov dword [ebp - 0x28], 0
jmp 0x42fb31
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x42fb4d
push dword [ebp - 0x28]
lea ecx, [ebp - 0xe8]
call fcn.00417a5a
mov dword [eax], 0xf0936a74
jmp 0x42fb2a
mov eax, dword [ebp - 0xc]
mov esi, dword [ebp + eax*4 - 0x88]
push 0
lea ecx, [ebp - 0xcc]
call fcn.00417a5a
cmp esi, dword [eax]
jne 0x42fb7a
mov eax, 0x864a
test eax, eax
jne 0x42fb7a
and dword [ebp - 0xa8], 0
jmp 0x42fb84
mov dword [ebp - 0xa8], 1
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xa0], eax
je 0x42fb9e
mov dword [ebp - 0xbc], 1
jmp 0x42fba5
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xbc], eax
jl 0x42fbbf
mov dword [ebp - 0x90], 1
jmp 0x42fbc6
and dword [ebp - 0x90], 0
mov eax, 0x78356027
sub eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x90]
add ecx, 0x138d7ef
cmp eax, ecx
je 0x42fbed
mov dword [ebp - 0xb8], 1
jmp 0x42fbf4
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xfd57
jg 0x42fc0c
mov dword [ebp - 0x98], 1
jmp 0x42fc13
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x88]
cmp dword [ebp - 0x98], eax
jge 0x42fc31
mov dword [ebp - 0xb0], 1
jmp 0x42fc38
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x88]
cmp dword [ebp - 0xb0], eax
jne 0x42fc5f
cmp dword [ebp - 0xa0], 0
je 0x42fc5f
mov dword [ebp - 0xc0], 1
jmp 0x42fc66
and dword [ebp - 0xc0], 0
cmp dword [ebp - 0xc0], 0x98a80146
je 0x42fc7b
mov dword [ebp - 0x3c], 1
jmp 0x42fc7f
and dword [ebp - 0x3c], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x88], ecx
push 0
lea ecx, [ebp - 0xe8]
call fcn.00417a5a
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0xcc]
call fcn.00417a5a
cmp dword [eax], 0
je 0x42fcbd
lea ecx, [ebp - 0xe8]
call fcn.00417a3e
jmp 0x42fccd
lea ecx, [ebp - 0xe8]
call fcn.00417a3e
jmp 0x42fae3
mov byte [ebp - 0xf], 0
movzx eax, byte [ebp - 0xf]
test eax, eax
je 0x42fd01
push 0x150c
push 0x2431
push 0x168d
push 0x1b2d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
lea ecx, [ebp - 0xcc]
call fcn.00417a3e
jmp 0x42fa84
jmp 0x42fa56
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
jmp 0x42fd57
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 4]
mov dword [ebp + eax - 0x88], ecx
mov byte [ebp - 0x10], 0
movzx eax, byte [ebp - 0x10]
test eax, eax
je 0x42fd57
push 0
push 0
push 0
push 0
push 0x1f26
push 1
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
lea eax, [ebp - 0x11c]
push eax
push 0
push dword [ebp + 0xc]
push 0x2614
call fcn.00431c8d
add esp, 0x10
mov dword [ebp - 8], 6
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x58], 2
mov dword [ebp - 0xec], 0xfffffffe
mov dword [ebp - 8], 0x19
jmp 0x42fd9f
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 5
jge 0x42fe1e
mov dword [ebp - 0x30], 5
mov byte [ebp - 0xe], 0
movzx eax, byte [ebp - 0xe]
test eax, eax
je 0x42fdd8
push 0
push 0x1154
push 0x223e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 0x30], 0
jmp 0x42fde8
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x15
jge 0x42fe19
mov byte [ebp - 0xd], 0
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x42fe17
push 0
push 0
push 0
push 0
push 0x1f26
push 1
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x42fde1
jmp 0x42fd98
mov eax, dword [ebp - 0x1c]
neg eax
jne 0x42fe2e
mov dword [ebp - 0x48], 1
jmp 0x42fe32
and dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x1c]
sub eax, 6
cmp dword [ebp - 0x48], eax
jg 0x42fe46
mov dword [ebp - 0x50], 1
jmp 0x42fe4a
and dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x58], eax
jl 0x42fe64
mov dword [ebp - 0xd4], 1
jmp 0x42fe6b
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0xfc], eax
push 8
pop eax
test eax, eax
je 0x42fe8a
cmp dword [ebp - 8], 0
je 0x42fe8a
mov dword [ebp - 0x60], 1
jmp 0x42fe8e
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x60], eax
jne 0x42fe9f
mov dword [ebp - 0x68], 1
jmp 0x42fea3
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x68], eax
jg 0x42feb4
mov dword [ebp - 0x70], 1
jmp 0x42feb8
and dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x70]
mov dword [ebp - 8], eax
push 0x18
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x11c]
push eax
mov ecx, dword [ebp + 8]
call fcn.00417897
mov dword [ebp - 0x24], 1
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x14], eax
imul eax, dword [ebp - 0x24], 0x18
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
js 0x42ff0d
mov eax, dword [ebp - 0x14]
sub eax, 0x18
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
call fcn.004178ce
jmp 0x42fef1
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret