Function at 0x42ed9b
Capabilities:
Create process on windows

Disassembly:
push 0x104
mov eax, 0x43558b
call fcn.004318dd
sub esp, 0x18
xor ebx, ebx
mov dword [ebp - 4], ebx
mov ecx, esp
mov dword [ebp - 0xa8], esp
push 0x411624
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
push 0x404f58
call fcn.0041314d
push 0x27b
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.00412723
push 0x44
pop esi
push esi
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 2
push ebx
push eax
call sub.msvcrt.dll_memset
xor eax, eax
mov dword [ebp - 0x110], esi
lea edi, [ebp - 0xcc]
add esp, 0xc
cmp dword [ebp + 0x1c], 8
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
jae 0x42ee1d
lea eax, [ebp + 8]
push eax
sub esp, 0x18
mov ecx, esp
push 0x41142c
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
pop ecx
pop ecx
mov ecx, esp
push 0x4115b8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x1c
lea ecx, [ebp - 0x5c]
mov edi, 0x411468
push edi
call fcn.0041314d
mov esi, eax
push edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 3
call fcn.0041314d
push 0xffffffffffffffff
push ebx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
push ecx
mov ecx, eax
call fcn.0041b794
push eax
lea ecx, [ebp - 0x74]
call fcn.00412ed8
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x64]
cmp dword [esi + 0x10], eax
jbe 0x42eeb5
mov eax, dword [esi + 0x14]
sub eax, dword [esi + 0x10]
cmp eax, dword [ebp - 0x64]
jb 0x42eeb5
push ecx
push ecx
lea eax, [ebp - 0x74]
push eax
push ecx
mov ecx, esi
call fcn.0042ecc9
jmp 0x42eec1
push 0xffffffffffffffff
push ebx
push esi
lea ecx, [ebp - 0x74]
call fcn.0041b794
push eax
lea ecx, [ebp - 0x8c]
call fcn.00412ed8
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp + 8]
call fcn.00418e76
xor esi, esi
lea ecx, [ebp - 0x8c]
push ebx
inc esi
push esi
call fcn.00413b40
push ebx
push esi
lea ecx, [ebp - 0x74]
call fcn.00413b40
push ebx
push esi
lea ecx, [ebp - 0xa4]
call fcn.00413b40
push ebx
push esi
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 2
call fcn.00413b40
cmp dword [ebp + 0x1c], 8
mov eax, dword [ebp + 8]
jae 0x42ef1d
lea eax, [ebp + 8]
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0x110]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x42efb9
push 0x411470
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb4], esp
push 0x404ef0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0xa8], esp
push 0x411624
call fcn.0041314d
push 0x2a8
sub esp, 0x18
mov byte [ebp - 4], 7
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 2
push eax
call fcn.004125b8
add esp, 0x54
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jg 0x42efa8
mov edi, esi
jmp 0x42efb1
movzx edi, si
or edi, 0x80070000
test esi, esi
jne 0x42f2fa
mov esi, dword [ebp - 0xcc]
mov dword [ebp - 0xb0], esi
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0xb4], edi
push 0xffffffffffffffff
push esi
mov byte [ebp - 4], 0xa
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x42f112
push 0x411538
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa8], esp
push 0x404ef0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0xbc], esp
push 0x411624
call fcn.0041314d
push 0x2af
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xa
push eax
call fcn.004125b8
add esp, 0x54
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
test ebx, ebx
jg 0x42f055
mov dword [ebp - 0xa8], ebx
jmp 0x42f063
movzx eax, bx
or eax, 0x80070000
mov dword [ebp - 0xa8], eax
test ebx, ebx
je 0x42f110
push 0x411538
sub esp, 0x18
mov ecx, esp
push 0x4050c8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
push ebx
sub esp, 0x18
mov ecx, esp
push 0x405104
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
mov esi, dword [ebp - 0xa8]
lea ecx, [ebp - 0x5c]
add esp, 0x20
mov edx, esi
call fcn.00412874
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x403c6c
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5c]
call fcn.00413b89
sub esp, 0x18
mov ecx, esp
push 0x403bd8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0xa8], esi
jmp 0x42f394
xor ebx, ebx
sub esp, 0x18
mov ecx, esp
push 0x4115b8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0xb8], ebx
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0xcc]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x42f274
push 0x411640
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xac], esp
push 0x404ef0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0xbc], esp
push 0x411624
call fcn.0041314d
push 0x2b4
sub esp, 0x18
mov byte [ebp - 4], 0xf
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xa
push eax
call fcn.004125b8
add esp, 0x54
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xa8], eax
test eax, eax
jg 0x42f1bd
mov ebx, eax
jmp 0x42f1c6
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
je 0x42f272
push 0x411640
sub esp, 0x18
mov ecx, esp
push 0x4050c8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
push dword [ebp - 0xa8]
sub esp, 0x18
mov ecx, esp
push 0x405104
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x5c]
mov edx, ebx
call fcn.00412874
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x403c6c
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5c]
call fcn.00413b89
sub esp, 0x18
mov ecx, esp
push 0x403bd8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0xa8], ebx
jmp 0x42f394
xor ebx, ebx
cmp dword [ebp - 0xb8], 0
je 0x42f2d1
lea ecx, [ebp + 8]
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x4116a8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
push dword [ebp - 0xb8]
sub esp, 0x18
mov ecx, esp
push 0x41171c
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
mov dword [ebp - 0xa8], 0x8000ffff
jmp 0x42f394
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x44]
call fcn.004127db
push ebx
push 1
lea ecx, [ebp + 8]
call fcn.00413b40
call fcn.0043188c
ret 0x18
push 0x411470
sub esp, 0x18
mov ecx, esp
push 0x4050c8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
push esi
sub esp, 0x18
mov ecx, esp
push 0x405104
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x5c]
mov edx, edi
call fcn.00412874
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x403c6c
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5c]
call fcn.00413b89
sub esp, 0x18
mov ecx, esp
push 0x403bd8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0xa8], edi
push 0x4394e4
lea eax, [ebp - 0xa8]
push eax
call sub.msvcrt.dll__CxxThrowException
int3