Function at 0x429240
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ce82b
mov eax, dword fs:[0]
push eax
mov eax, 0x1284
call fcn.0055b970
mov eax, dword [0x6385e0]
xor eax, ebp
mov dword [ebp - 0x20], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push eax
call fcn.00427ae0
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x429294
push str.Failed_to_update_the_original_executable_r_n
call fcn.0054d5e0
add esp, 4
jmp 0x4294a5
push 0
mov edx, dword [ebp + 8]
push edx
call fcn.00429510
add esp, 8
push 0x104
lea eax, [ebp - 0x1274]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x1274]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004553f0
push eax
push str.__s___updated:__s_
push 0x800
lea edx, [ebp - 0x1024]
push edx
call fcn.0054e0f2
add esp, 0x14
mov ecx, dword [ebp + 0xc]
add ecx, 4
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 4]
mov eax, dword [edx + 0xc]
call eax
test eax, eax
jle 0x42942a
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx]
call eax
push eax
lea ecx, [ebp - 0x1280]
call fcn.00432930
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1280]
call fcn.004b9730
mov dword [ebp - 0x1284], eax
mov ecx, dword [ebp - 0x1284]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1284]
mov eax, dword [edx]
call eax
movzx ecx, al
test ecx, ecx
je 0x429418
lea ecx, [ebp - 0x1280]
call fcn.004b9730
mov dword [ebp - 0x1288], eax
push 0x5fcdd0
mov edx, dword [ebp - 0x1288]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1288]
mov edx, dword [eax + 8]
call edx
mov ecx, eax
call fcn.004b6880
movzx eax, al
test eax, eax
jne 0x429381
jmp 0x429413
lea ecx, [ebp - 0x1280]
call fcn.004b9730
mov dword [ebp - 0x128c], eax
push 0
push str._update
mov ecx, dword [ebp - 0x128c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x128c]
mov eax, dword [edx + 8]
call eax
mov ecx, eax
call fcn.004b68a0
movzx ecx, al
test ecx, ecx
jne 0x429413
push 0x5fcdf0
push 0x800
lea edx, [ebp - 0x1024]
push edx
call fcn.0054eb7c
add esp, 0xc
lea ecx, [ebp - 0x1280]
call fcn.004b9730
mov dword [ebp - 0x1290], eax
mov eax, dword [ebp - 0x1290]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1290]
mov eax, dword [edx + 8]
call eax
mov ecx, eax
call fcn.004553f0
push eax
push 0x800
lea ecx, [ebp - 0x1024]
push ecx
call fcn.0054eb7c
add esp, 0xc
jmp 0x429317
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1280]
call fcn.00432970
mov dword [ebp - 0x106c], 0
push 0x40
push 0
lea edx, [ebp - 0x1068]
push edx
call fcn.00555bf0
add esp, 0xc
mov dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x106c], 0x44
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x106c]
push edx
push 0
push 0
push 0
push 1
push 0
push 0
lea eax, [ebp - 0x1024]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x4294a5
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
jmp 0x4294a7
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.0054d4f5
mov esp, ebp
pop ebp
ret