Function at 0x42b600
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x484880
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x140
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 1
push 1
push 1
push 0x5c
push str.._tvt_windowsprocess.cpp
push str.start
mov dword [ebp - 0x18], ecx
push str.CTVTWindowsProcess
lea ecx, [ebp - 0x1c]
call fcn.0040e269
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 4]
mov esi, dword [ebx + 8]
xor ecx, ecx
test eax, eax
sete cl
xor edx, edx
test esi, esi
sete dl
mov dword [ebp - 4], 0
mov byte [ebp - 0x11], 0
mov byte [ebp - 4], 1
xor ecx, edx
jne 0x42b678
test eax, eax
jne 0x42b6ab
test esi, esi
jne 0x42b6ab
push 0
push 1
push 1
push 0x65
push str.._tvt_windowsprocess.cpp
push str.The_string_isnt_valid
push str.wcsCommandLine
lea ecx, [ebp - 0xcc]
call fcn.00411320
push 0x4b2184
lea eax, [ebp - 0xcc]
push eax
call sub.MSVCR71.dll__CxxThrowException
mov al, byte [ebp + 0x1c]
test al, al
mov esi, dword [ebp - 0x18]
mov dword [esi], 0
je 0x42b7ee
xor eax, eax
mov ecx, 0x11
lea edi, [ebp - 0x7c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 0x18]
cmp eax, 0xe
mov dword [ebp - 0x7c], 0x44
je 0x42b6e5
mov dword [ebp - 0x50], 1
mov word [ebp - 0x4c], ax
push ebx
lea ecx, [ebp - 0x28]
call fcn.004140e0
mov esi, dword [ebp + 0xc]
mov eax, dword [esi + 4]
mov edi, dword [esi + 8]
xor ecx, ecx
test eax, eax
sete cl
xor edx, edx
test edi, edi
sete dl
mov bl, 2
mov byte [ebp - 4], bl
xor ecx, edx
jne 0x42b747
test eax, eax
jne 0x42b716
test edi, edi
je 0x42b747
push 0x48f618
lea ecx, [ebp - 0x34]
call fcn.00414780
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.004129b0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.004034a5
push esi
lea ecx, [ebp - 0x28]
call fcn.004129b0
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 8]
mov eax, dword [eax + 4]
xor ecx, ecx
test eax, eax
sete cl
xor edx, edx
test edi, edi
sete dl
xor ecx, edx
jne 0x42b76a
test eax, eax
jne 0x42b76c
test edi, edi
jne 0x42b76c
xor eax, eax
lea ecx, [ebp - 0x8c]
push ecx
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x7c]
push edx
push eax
mov eax, dword [ebp + 0x14]
push 0
or eax, 0x8000008
push eax
push 0
push 0
push 0
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x42b7ce
mov esi, dword [ebp - 0x24]
push 1
push 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x8b
push str.._tvt_windowsprocess.cpp
push esi
lea ecx, [ebp - 0x10c]
call fcn.0042ace0
push 0x4b9434
lea edx, [ebp - 0x10c]
push edx
call sub.MSVCR71.dll__CxxThrowException
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov bl, 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x11], bl
mov byte [ebp - 4], bl
call fcn.004034a5
jmp 0x42b8d6
mov edx, dword [ebp + 0x10]
xor eax, eax
mov ecx, 0xf
lea edi, [ebp - 0x74]
rep stosd dword es:[edi], eax
mov eax, dword [edx + 4]
mov ecx, dword [ebx + 4]
mov edi, dword [ebp + 0xc]
mov edx, dword [edi + 4]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 0x18]
lea ecx, [ebp - 0x74]
push ecx
mov dword [ebp - 0x74], 0x3c
mov dword [ebp - 0x70], 0x8440
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x58], eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x42b8bf
push edi
lea edx, [ebp - 0x34]
push edx
mov ecx, ebx
call fcn.004141c0
mov esi, dword [ebp - 0x30]
push 1
push 1
mov byte [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x9f
push str.._tvt_windowsprocess.cpp
push esi
lea ecx, [ebp - 0x14c]
call fcn.0042ace0
push 0x4b9434
lea eax, [ebp - 0x14c]
push eax
call sub.MSVCR71.dll__CxxThrowException
mov ecx, dword [ebp - 0x38]
mov al, byte [ecx + 0xa]
test al, al
jne 0x42b88c
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, 0x42b8d3
ret
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x3c]
push ecx
push eax
mov dword [esi], eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov bl, 1
jmp 0x42b8d6
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x42b8e7
mov dword [ecx + 0x24], 1
mov byte [ecx + 0x2c], bl
test ecx, ecx
mov dword [ebp - 4], 0xffffffff
je 0x42b8f8
mov edx, dword [ecx]
push 1
call dword [edx]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov al, bl
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x18