Function at 0x42a10a
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cc7cc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x158
mov dword [ebp - 0x15c], ecx
xor eax, eax
mov al, byte [0x5b8450]
test eax, eax
je 0x42a13e
jmp 0x42a50b
mov byte [0x5b8450], 1
push 0x528f1c
call fcn.0040d6f5
add esp, 4
push 0x528f38
push 0x528f3c
push 0x528f44
call fcn.0042908d
add esp, 0xc
push 0x528f54
lea ecx, [ebp - 0x154]
call fcn.004ad180
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x158]
push edx
call fcn.0042c094
add esp, 4
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x164], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x164]
push ecx
lea edx, [ebp - 0x114]
push edx
call fcn.004ad2ef
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004ad0c0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x154]
call fcn.004ad0c0
push 0
lea ecx, [ebp - 0x114]
call fcn.00406f50
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x11c], 0
lea eax, [ebp - 0x11c]
push eax
push 0x528f6c
call fcn.004448bb
add esp, 8
cmp dword [ebp - 0x11c], 0
je 0x42a231
mov ecx, dword [ebp - 0x11c]
push ecx
call fcn.004449bf
add esp, 4
cmp dword [ebp - 0x11c], 0
jne 0x42a1fb
mov ecx, dword [ebp - 0x15c]
call fcn.00429fd2
call dword [sym.imp.RtlLib.dll_RT_AP_GetIsAPMode]
and eax, 0xff
test eax, eax
jne 0x42a2cb
cmp dword [0x5d37bc], 0
je 0x42a2cb
cmp dword [0x5d37bc], 0xdddddddd
je 0x42a2cb
push 0
mov edx, dword [0x5d37b4]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x42a2cb
mov byte [0x5d436d], 1
mov dword [ebp - 0x150], 5
push 0
mov eax, dword [0x5d37b4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x42a2c4
cmp dword [ebp - 0x150], 0
je 0x42a2c4
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x150]
sub ecx, 1
mov dword [ebp - 0x150], ecx
jmp 0x42a28d
mov byte [0x5d436d], 0
cmp dword [0x5d3c3c], 0
je 0x42a2f9
push 0x528f78
call fcn.0040d6f5
add esp, 4
mov ecx, dword [0x5d3c3c]
call fcn.00436c2e
push str.___Exit_PropertyDig
call fcn.0040d6f5
add esp, 4
push 0x200
mov ecx, 0x5d3e18
call fcn.004ad4f0
push eax
lea ecx, [ebp - 0x10c]
call fcn.0042314e
lea ecx, [ebp - 0x118]
call fcn.00406f30
mov byte [ebp - 4], 5
push 0x528fa0
push 0x528fa8
push 0x528fb0
lea ecx, [ebp - 0x10c]
call fcn.004232f4
push eax
lea ecx, [ebp - 0x118]
call fcn.004ad249
lea ecx, [ebp - 0x118]
call fcn.00406f50
push eax
push 0
call fcn.00411030
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x42a39b
push 0x528fbc
call fcn.0040d6f5
add esp, 4
push 0
push 0
push 0x10
mov edx, dword [ebp - 0x130]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
push str.___Exit_RT_Set
call fcn.0040d6f5
add esp, 4
mov ecx, dword [0x5b7b84]
mov dword [ebp - 0x12c], ecx
mov edx, dword [0x5b7b7c]
mov dword [ebp - 0x128], edx
mov eax, dword [0x5b7b6c]
mov dword [ebp - 0x124], eax
push 0x528fdc
call fcn.0040d6f5
add esp, 4
mov dword [ebp - 0x120], 0
jmp 0x42a3e6
mov ecx, dword [ebp - 0x120]
add ecx, 1
mov dword [ebp - 0x120], ecx
cmp dword [ebp - 0x120], 0xbb8
jge 0x42a45c
push 1
push 1
lea edx, [ebp - 0x12c]
push edx
push 3
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, 0x102
je 0x42a40e
jmp 0x42a45c
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x14c]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
je 0x42a457
cmp dword [ebp - 0x110], 0xffffffff
je 0x42a455
lea ecx, [ebp - 0x14c]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [ebp - 0x14c]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x42a40e
jmp 0x42a3d7
push str.___Wait_all_thread_to_terminate
call fcn.0040d6f5
add esp, 4
push 0x52901c
call fcn.0040d6f5
add esp, 4
mov ecx, dword [ebp - 0x15c]
call fcn.0042d7f4
push str.___Delete_All_Page
call fcn.0040d6f5
add esp, 4
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov al, byte [0x5d3fc5]
test eax, eax
je 0x42a4cb
mov byte [0x5d3fc5], 0
push 0x529044
call fcn.0040d6f5
add esp, 4
call dword [sym.imp.RtlLib.dll_RT_Stop]
push str.___RT_Stop
call fcn.0040d6f5
add esp, 4
mov byte [0x5b8450], 0
mov ecx, dword [ebp - 0x15c]
call fcn.004c1ea2
push str.__CMainFrame::OnMyClose
call fcn.0040d6f5
add esp, 4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x118]
call fcn.004ad0c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.004ad0c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret