Function at 0x42f480
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc4
mov dword [ebp - 0x1c], ecx
lea eax, [ebp - 0xc4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 8]
call eax
mov ecx, eax
call fcn.00408bc0
push eax
lea ecx, [ebp - 8]
call fcn.004088f0
lea ecx, [ebp - 0xc4]
call fcn.00408bd0
xor ecx, ecx
mov byte [ebp - 9], cl
lea edx, [ebp - 0x20]
push edx
lea ecx, [ebp - 9]
call fcn.0042ced0
push eax
lea eax, [ebp - 8]
push eax
call fcn.00411fe0
add esp, 8
mov byte [ebp - 0xa], al
lea ecx, [ebp - 0x20]
call fcn.00408870
movzx ecx, byte [ebp - 0xa]
test ecx, ecx
je 0x42f519
mov ecx, dword [ebp - 0x1c]
call fcn.0042f080
movzx edx, al
test edx, edx
jne 0x42f514
lea ecx, [ebp - 8]
call fcn.00408870
jmp 0x42f727
jmp 0x42f713
xor eax, eax
mov byte [ebp - 0xb], al
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0xb]
call fcn.0042e0a0
push eax
lea edx, [ebp - 8]
push edx
call fcn.00411fe0
add esp, 8
mov byte [ebp - 0xc], al
lea ecx, [ebp - 0x24]
call fcn.00408870
movzx eax, byte [ebp - 0xc]
test eax, eax
je 0x42f557
mov ecx, dword [ebp - 0x1c]
call fcn.0042f960
jmp 0x42f713
xor ecx, ecx
mov byte [ebp - 0xd], cl
lea edx, [ebp - 0x28]
push edx
lea ecx, [ebp - 0xd]
call fcn.0042e520
push eax
lea eax, [ebp - 8]
push eax
call fcn.00411fe0
add esp, 8
mov byte [ebp - 0xe], al
lea ecx, [ebp - 0x28]
call fcn.00408870
movzx ecx, byte [ebp - 0xe]
test ecx, ecx
je 0x42f595
mov ecx, dword [ebp - 0x1c]
call fcn.0042f2c0
jmp 0x42f713
xor edx, edx
mov byte [ebp - 0xf], dl
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xf]
call fcn.0042e720
push eax
lea ecx, [ebp - 8]
push ecx
call fcn.00411fe0
add esp, 8
mov byte [ebp - 0x10], al
lea ecx, [ebp - 0x2c]
call fcn.00408870
movzx edx, byte [ebp - 0x10]
test edx, edx
je 0x42f5d3
mov ecx, dword [ebp - 0x1c]
call fcn.0042f1a0
jmp 0x42f713
xor eax, eax
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x11]
call fcn.0042d1c0
push eax
lea edx, [ebp - 8]
push edx
call fcn.00411fe0
add esp, 8
mov byte [ebp - 0x12], al
lea ecx, [ebp - 0x30]
call fcn.00408870
movzx eax, byte [ebp - 0x12]
test eax, eax
je 0x42f63d
xor ecx, ecx
mov byte [ebp - 0x13], cl
push 1
push 0
push 0
lea edx, [ebp - 0x34]
push edx
lea ecx, [ebp - 0x13]
call fcn.0042d7d0
mov ecx, eax
call fcn.00408bc0
push eax
push 0x526590
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x34]
call fcn.00408870
jmp 0x42f713
xor eax, eax
mov byte [ebp - 0x14], al
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0042d420
push eax
lea edx, [ebp - 8]
push edx
call fcn.00411fe0
add esp, 8
mov byte [ebp - 0x15], al
lea ecx, [ebp - 0x38]
call fcn.00408870
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x42f6a4
xor ecx, ecx
mov byte [ebp - 0x16], cl
push 1
push 0
push 0
lea edx, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x16]
call fcn.0042d5d0
mov ecx, eax
call fcn.00408bc0
push eax
push 0x52659c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x3c]
call fcn.00408870
jmp 0x42f713
xor eax, eax
mov byte [ebp - 0x17], al
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x17]
call fcn.0042e9d0
push eax
lea edx, [ebp - 8]
push edx
call fcn.00411fe0
add esp, 8
mov byte [ebp - 0x18], al
lea ecx, [ebp - 0x40]
call fcn.00408870
movzx eax, byte [ebp - 0x18]
test eax, eax
je 0x42f713
push 0
call fcn.00424110
mov ecx, eax
call fcn.0041f5c0
push 1
call fcn.00424110
mov ecx, eax
call fcn.0041f690
lea ecx, [ebp - 1]
call fcn.0041b730
lea ecx, [ebp - 1]
call fcn.0042cb90
push 1
mov ecx, dword [ebp - 0x1c]
call fcn.00439110
lea ecx, [ebp - 1]
call fcn.0042c9e0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.0043ba20
lea ecx, [ebp - 8]
call fcn.00408870
mov esp, ebp
pop ebp
ret 4