Function at 0x42e730
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x486078
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x4aeda0]
xor eax, esp
mov dword [esp + 0x20], eax
push ebx
push esi
push edi
mov eax, dword [0x4aeda0]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor eax, eax
xor ebx, ebx
push esi
mov edi, ecx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], ax
call fcn.00450a1d
mov ecx, esi
add esp, 4
lea esi, [esp + 0x14]
call fcn.00401b92
push str.kernel32.dll
mov dword [esp + 0x44], ebx
call fcn.00450a1d
add esp, 4
push eax
mov eax, str.kernel32.dll
mov ecx, esi
call fcn.00401880
mov eax, dword [esp + 0x18]
mov esi, 8
cmp dword [esp + 0x2c], esi
jae 0x42e7c6
lea eax, [esp + 0x18]
push eax
push str.DLLKernel32::Load___LoadLibrary__S_
push 0x1d
push ecx
call fcn.0041ef10
add esp, 4
push eax
mov ebx, 0x2000040
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
mov eax, dword [esp + 0x28]
add esp, 0x10
cmp dword [esp + 0x2c], esi
jae 0x42e7f8
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [edi + 4], eax
test eax, eax
jne 0x42e855
mov edi, dword [esp + 0x18]
cmp dword [esp + 0x2c], esi
jae 0x42e814
lea edi, [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
push str.LoadLibrary__S____lu
push 0x21
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
cmp dword [esp + 0x2c], esi
jb 0x42e84e
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0045061f
add esp, 4
xor eax, eax
jmp 0x42eb8a
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.GetNativeSystemInfo
push eax
call esi
mov dword [edi + 0xc], eax
test eax, eax
jne 0x42e895
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetNativeSystemInfo
push str._s__NULL__Error___lu
push 0x25
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov edx, dword [edi + 4]
push str.IsWow64Process
push edx
call esi
mov dword [edi + 0x10], eax
test eax, eax
jne 0x42e8d2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.IsWow64Process
push str._s__NULL__Error___lu
push 0x26
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov eax, dword [edi + 4]
push str.GetProcessTimes
push eax
call esi
mov dword [edi + 0x14], eax
test eax, eax
jne 0x42e90f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetProcessTimes
push str._s__NULL__Error___lu
push 0x27
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov ecx, dword [edi + 4]
push str.QueryFullProcessImageNameW
push ecx
call esi
mov dword [edi + 0x18], eax
test eax, eax
jne 0x42e94c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryFullProcessImageNameW
push str._s__NULL__Error___lu
push 0x28
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov edx, dword [edi + 4]
push str.CreateJobObjectW
push edx
call esi
mov dword [edi + 0x1c], eax
test eax, eax
jne 0x42e989
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateJobObjectW
push str._s__NULL__Error___lu
push 0x29
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov eax, dword [edi + 4]
push str.AssignProcessToJobObject
push eax
call esi
mov dword [edi + 0x20], eax
test eax, eax
jne 0x42e9c6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.AssignProcessToJobObject
push str._s__NULL__Error___lu
push 0x2a
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov ecx, dword [edi + 4]
push str.SetInformationJobObject
push ecx
call esi
mov dword [edi + 0x24], eax
test eax, eax
jne 0x42ea03
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SetInformationJobObject
push str._s__NULL__Error___lu
push 0x2b
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov edx, dword [edi + 4]
push str.GetFinalPathNameByHandleW
push edx
call esi
mov dword [edi + 0x28], eax
test eax, eax
jne 0x42ea40
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetFinalPathNameByHandleW
push str._s__NULL__Error___lu
push 0x2c
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov eax, dword [edi + 4]
push str.GetSystemWindowsDirectory
push eax
call esi
mov dword [edi + 0x2c], eax
test eax, eax
jne 0x42ea7d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetSystemWindowsDirectory
push str._s__NULL__Error___lu
push 0x2d
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov ecx, dword [edi + 4]
push str.GetSystemWow64Directory
push ecx
call esi
mov dword [edi + 0x30], eax
test eax, eax
jne 0x42eaba
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetSystemWow64Directory
push str._s__NULL__Error___lu
push 0x2e
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov edx, dword [edi + 4]
push str.GetLongPathNameW
push edx
call esi
mov dword [edi + 0x34], eax
test eax, eax
jne 0x42eaf7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetLongPathNameW
push str._s__NULL__Error___lu
push 0x2f
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov eax, dword [edi + 4]
push str.Wow64GetThreadContext
push eax
call esi
mov dword [edi + 0x38], eax
test eax, eax
jne 0x42eb34
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Wow64GetThreadContext
push str._s__NULL__Error___lu
push 0x30
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
mov ecx, dword [edi + 4]
push str.Wow64GetThreadSelectorEntry
push ecx
call esi
mov dword [edi + 0x3c], eax
test eax, eax
jne 0x42eb71
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Wow64GetThreadSelectorEntry
push str._s__NULL__Error___lu
push 0x31
call fcn.0041ef10
push eax
mov ebx, 0x2000002
mov ecx, str..DLLKernel32.cpp
call fcn.0041f0d0
add esp, 0x14
cmp dword [esp + 0x2c], 8
jb 0x42eb85
mov edx, dword [esp + 0x18]
push edx
call fcn.0045061f
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.004504a7
mov esp, ebp
pop ebp
ret 4