Function at 0x424833
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor ebx, ebx
push 0x44
mov esi, eax
lea eax, [ebp - 0x84]
push ebx
push eax
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
call fcn.004272a0
xor eax, eax
lea edi, [ebp - 0x18]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
add esp, 0xc
lea edi, [ebp - 0x40]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x30]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x30]
push eax
call fcn.004028d1
xor eax, eax
lea edi, [ebp - 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00402957
mov edi, eax
cmp edi, ebx
jge 0x4248b4
push str.Failed_to_create_embedded_pipe_name_and_client_token.
jmp 0x4249a8
lea eax, [ebp - 4]
push eax
push ebx
lea eax, [ebp - 0x30]
push eax
call fcn.004035f2
mov edi, eax
cmp edi, ebx
jge 0x4248d2
push str.Failed_to_create_embedded_pipe.
jmp 0x4249a8
push esi
push dword [ebp - 0x2c]
lea eax, [ebp - 8]
push dword [ebp - 0x30]
push str.burn.embedded
push dword [ebp + 0xc]
push str._ls___ls__ls__ls__u
push eax
call fcn.00430aad
mov edi, eax
add esp, 0x1c
cmp edi, ebx
jge 0x424902
push str.Failed_to_allocate_embedded_command.
jmp 0x4249a8
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push ebx
push 0x8000000
push ebx
push ebx
push ebx
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x42495d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x42493b
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x424946
mov edi, 0x80004005
push edi
push 0x56
push str.embedded.cpp
call fcn.0043166e
push dword [ebp + 8]
push str.Failed_to_create_embedded_process_atpath:__ls
jmp 0x4249cd
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x18], ebx
call fcn.00402c37
mov edi, eax
cmp edi, ebx
jge 0x424988
push str.Failed_to_wait_for_embedded_process_to_connect_to_pipe.
jmp 0x4249a8
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x424797
push dword [ebp - 0x20]
call fcn.004033fe
mov edi, eax
cmp edi, ebx
jge 0x4249b2
push str.Failed_to_process_messages_from_embedded_message.
push edi
call fcn.0042eef6
pop ecx
pop ecx
jmp 0x4249d6
push dword [ebp + 0x18]
push 0xffffffffffffffff
push dword [ebp - 0x24]
call fcn.0042f4a3
mov edi, eax
cmp edi, ebx
jge 0x4249d6
push dword [ebp + 8]
push str.Failed_to_wait_for_embedded_executable:__ls
push edi
call fcn.0042eef6
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x14], ebx
je 0x4249e9
push dword [ebp - 0x14]
call esi
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x18], ebx
je 0x4249f6
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 8], ebx
je 0x424a03
push dword [ebp - 8]
call fcn.0042f657
cmp dword [ebp - 4], ebx
je 0x424a10
push dword [ebp - 4]
call esi
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x30]
push eax
call fcn.004028ee
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x14